CVEs-PoC/2018/CVE-2018-16159.md

CVE-2018-16159

Description

The Gift Vouchers plugin through 2.0.1 for WordPress allows SQL Injection via the template_id parameter in a wp-admin/admin-ajax.php wpgv_doajax_front_template request.

POC

Reference

• https://wpvulndb.com/vulnerabilities/9117
• https://www.exploit-db.com/exploits/45255/

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates