CVE-2017-12947

High

Published: 18/08/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The Easy Modal plugin before version 2.1.0 for WordPress has an SQL injection vulnerability in an untrash action using the id, ids, or modal parameters to wp-admin/admin.php.

Risk Assessment

Administrators may exploit this vulnerability to gain unauthorized access to database data, potentially leading to serious security breaches.

Recommendation

It is recommended to update the Easy Modal plugin to version 2.1.0 or later to mitigate this vulnerability.

Other vulnerabilities in Easy Modal plugin for WordPress

CVE-2017-12946High
The Easy Modal plugin before version 2.1.0 for WordPress has an SQL injection vulnerability in a delete action using the id, ids, or modal parameters to wp-admin/admin.php.

Original NVD description (English source)

classes\controller\admin\modals.php in the Easy Modal plugin before 2.1.0 for WordPress has SQL injection in an untrash action with the id, ids, or modal parameter to wp-admin/admin.php, exploitable by administrators.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS