WordPress plugin DTracker v1.5 vulnerabilities
4 known CVE vulnerabilities in WordPress plugin DTracker v1.5, translated and rated.
- CVE-2017-1002007High
Vulnerability in WordPress plugin DTracker v1.5 allows injecting new contacts into the wp_contact table without checking user authorization.
- CVE-2017-1002006High
Vulnerability in WordPress plugin DTracker version 1.5 allows adding new contacts to the wp_contact table without checking user authorization.
- CVE-2017-1002005High
Vulnerability in WordPress plugin DTracker v1.5 is due to lack of input sanitization in the ./dtracker/delete.php file. The contact_id variable is not properly filtered before being appended to an SQL query.
- CVE-2017-1002004High
Vulnerability in WordPress plugin DTracker v1.5 is due to the lack of user input sanitization in the ./dtracker/download.php file. The id variable is appended to the SQL query without proper processing.