6.5
CVSSv2

CVE-2019-12570

Published: 03/07/2019 Updated: 02/12/2019
CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 578
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Vulnerability Summary

A SQL injection vulnerability in the Xpert Solution "Server Status by Hostname/IP" plugin 4.6 for WordPress allows an authenticated user to execute arbitrary SQL commands via GET parameters.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

xpertsol server status by hostname\\/ip 4.6