CVE-2018-16159

NONE EPSS 98.8%

Published Aug 30, 20187y ago · Modified Jun 17, 20262w ago

Published Aug 30, 2018 7y ago

Last Modified Jun 17, 2026 2w ago

Description

The Gift Vouchers plugin through 2.0.1 for WordPress allows SQL Injection via the template_id parameter in a wp-admin/admin-ajax.php wpgv_doajax_front_template request.

Threat Intelligence

EPSS Exploit Probability

98.8% percentile

Exploit & Patch Status

Public Exploit Known

No Patch Available

Weaknesses 1

CWE-89 SQL Injection Injection

Affected Products 1

Vendor	Product	Version	Range
codemenschen	gift_vouchers	*	≤2.0.1

References 2

wpvulndb.com https://wpvulndb.com/vulnerabilities/9117

Third Party Advisory
exploit-db.com https://www.exploit-db.com/exploits/45255/

ExploitThird Party AdvisoryVDB Entry

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.