plugin

Nd Stats For Envato Sales By Item Vulnerabilities

1 known security issue reported for the Nd Stats For Envato Sales By Item WordPress plugin. Most recent disclosed May 26, 2022.

1 medium

Running Nd Stats For Envato Sales By Item on your site? Check whether your installed version is affected.

Scan your site free

Envato Sales By Item <= 1.1 - Unauthenticated SQL Injection via AJAX call

medium

The Envato Sales By Item plugin for WordPress fails to sanitize user input that is subsequently used in an SQL. It also lacks capability checks. An unauthenticated attacker could exploit this in versions up to 1.1.

CVSS:
6.5
Affected:
up to 1.1
Fix:
No patched version reported
Disclosed:
May 26, 2022

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database