wordpress Archives - Impenetrable Blog

Authenticated Time Based SQL Injection in WordPress Participants Database Plugin <= 1.9.5.5 (CVE-2020-8596)

February 10, 2020 Teacish 1 Comment

Writeup with PoC for an authenticated time based SQL injection exploit identified in the Participants Database WordPress Plugin version <= 1.9.5.5.

Discovered Exploits

January 28, 2020 Teacish

An XSS was identified in the WordPress Elementor Plugin version 2.8.4 and below. This could allow an attacker to hijack session cookies. Update now!