https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 15:00:38 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-293420 EUVD-2026-293420 https://cve.radiocsirt.org/vuln/euvd-2026-293420 https://cve.radiocsirt.org/vuln/fkie_cve-2021-36916 <p>The SQL injection vulnerability in the Hide My WP WordPress plugin (versions &lt;= 6.2.3) is possible because of how the IP address is retrieved and used inside a SQL query. The function &#34;hmwp_get_user_ip&#34; tries to retrieve the IP address from multiple headers, including IP address headers that the user can spoof, such as &#34;X-Forwarded-For.&#34; As a result, the malicious payload supplied in one of these IP address headers will be directly inserted into the SQL query, making SQL injection possible.</p> <p>The SQL injection vulnerability in the Hide My WP WordPress plugin (versions &lt;= 6.2.3) is possible because of how the IP address is retrieved and used inside a SQL query. The function &#34;hmwp_get_user_ip&#34; tries to retrieve the IP address from multiple headers, including IP address headers that the user can spoof, such as &#34;X-Forwarded-For.&#34; As a result, the malicious payload supplied in one of these IP address headers will be directly inserted into the SQL query, making SQL injection possible.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-36916 https://cve.radiocsirt.org/vuln/ghsa-53q2-99ph-73wh <p>The SQL injection vulnerability in the Hide My WP WordPress plugin (versions &lt;= 6.2.3) is possible because of how the IP address is retrieved and used inside a SQL query. The function &#34;hmwp_get_user_ip&#34; tries to retrieve the IP address from multiple headers, including IP address headers that the user can spoof, such as &#34;X-Forwarded-For.&#34; As a result, the malicious payload supplied in one of these IP address headers will be directly inserted into the SQL query, making SQL injection possible.</p> <p>The SQL injection vulnerability in the Hide My WP WordPress plugin (versions &lt;= 6.2.3) is possible because of how the IP address is retrieved and used inside a SQL query. The function &#34;hmwp_get_user_ip&#34; tries to retrieve the IP address from multiple headers, including IP address headers that the user can spoof, such as &#34;X-Forwarded-For.&#34; As a result, the malicious payload supplied in one of these IP address headers will be directly inserted into the SQL query, making SQL injection possible.</p> https://cve.radiocsirt.org/vuln/ghsa-53q2-99ph-73wh https://cve.radiocsirt.org/vuln/gsd-2021-36916 gsd-2021-36916 https://cve.radiocsirt.org/vuln/gsd-2021-36916