CVE-2017-9834

PoC —

CVSS 3.0

9.8 critical

EPSS

4%p90

Published

Sep 7, 2017 (Sep 7, 2017)

Modified

Jun 17, 2026

Description

SQL injection vulnerability in the WatuPRO plugin before 5.5.3.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the watupro_questions parameter in a watupro_submit action to wp-admin/admin-ajax.php.

Vendors: calendarscripts
Products: watupro
Ecosystems: WordPress
Weakness: CWE-89
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.1%)

In the news0 stories

No ingested article mentions this CVE yet.