CVE-2018-16159
52Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 50%
from disclosure to weapon
Published on NVDAug 30
VulnCheck+1914d
exploitation probability
50%top 1% of all CVEs
observed exploitation
yesVulnCheck
The Gift Vouchers plugin through 2.0.1 for WordPress allows SQL Injection via the template_id parameter in a wp-admin/admin-ajax.php wpgv_doajax_front_template request.
Affected products
n/a · n/a