Vulnerabilities CVE-2020-37244

CVE-2020-37244

High

Open

TLP:CLEAR

WordPress Plugin Supsystic Membership 1.4.7 SQL Injection via sidx

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Supsystic Membership 1.4.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'search' and 'sidx' parameters. Attackers can send GET requests to the badges module with crafted payloads to extract sensitive database information using time-based blind or UNION-based SQL injection techniques.

Details

CVSS Score: 8.8
EPSS Score ⓘ: 0.28%

20.1th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
Confidence: 90%
Published: May 16, 2026
Last Modified: Jul 28, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.