CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.8. It affects WordPress. It involves a SQL injection risk.
CVE
CVE-2020-12104
Severity
HIGH
CVSS
8.8
EPSS
1.60%
WordPress
Original NVD Description
The Import feature in the wp-advanced-search plugin 3.3.6 for WordPress is vulnerable to authenticated SQL injection via an uploaded .sql file. An attacker can use this to execute SQL commands without any validation.
Related CVEs
Other vulnerabilities affecting the same vendor(s)