NOSpamPTI <= 2.1 - SQL Injection
criticalSQL injection vulnerability in wp-comments-post.php in the NOSpam PTI plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the comment_post_ID parameter.
- CVSS:
- 9.8
- Affected:
- up to 2.1
- Fix:
- No patched version reported
- Disclosed:
- Sep 20, 2013