CVE-2020-13640

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A SQL injection issue in the gVectors wpDiscuz plugin 5.3.5 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the order parameter of a wpdLoadMoreComments request. (No 7.x versions are affected.)

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.openwall.com/lists/oss-security/2020/07/06/1Exploit, Mailing List, Third Party Advisory
https://plugins.trac.wordpress.org/browser/wpdiscuz/tags/5.3.6Third Party Advisory
https://plugins.trac.wordpress.org/changeset/2323200Third Party Advisory
https://wordpress.org/plugins/wpdiscuz/#developersRelease Notes, Third Party Advisory
https://wpdiscuz.com/community/news/security-vulnerability-issue-in-5-3-5-please-udate/Patch, Vendor Advisory
http://www.openwall.com/lists/oss-security/2020/07/06/1Exploit, Mailing List, Third Party Advisory
https://plugins.trac.wordpress.org/browser/wpdiscuz/tags/5.3.6Third Party Advisory
https://plugins.trac.wordpress.org/changeset/2323200Third Party Advisory
https://wordpress.org/plugins/wpdiscuz/#developersRelease Notes, Third Party Advisory
https://wpdiscuz.com/community/news/security-vulnerability-issue-in-5-3-5-please-udate/Patch, Vendor Advisory

Timeline

Published: Jun 18, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-136418.8An issue was discovered in the Real-Time Find and Replace plugin before 4.0.2 for WordPress. The far_options_page function did not do any no CVE-2020-136428.8An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. The action_builder_content function did not do a CVE-2020-136438.8An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. The live editor feature did not do any nonce ver CVE-2020-136445.4An issue was discovered in the Accordion plugin before 2.2.9 for WordPress. The unprotected AJAX wp_ajax_accordions_ajax_import_json action CVE-2020-136456.5In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certific CVE-2020-136467.8In Cheetah free WiFi 5.1, the driver file (liebaonat.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecifie CVE-2020-136497.5parser/js/js-scanner.c in JerryScript 2.2.0 mishandles errors during certain out-of-memory conditions, as demonstrated by a scanner_reverse_CVE-2020-13657.8An elevation of privilege vulnerability exists when the Windows Event Logging Service improperly handles memory.To exploit this vulnerabilit CVE-2020-136507.5An issue was discovered in DigDash 2018R2 before p20200210 and 2019R1 before p20200210. The login page is vulnerable to Server-Side Request CVE-2020-136517.8An issue was discovered in DigDash 2018R2 before p20200528, 2019R1 before p20200421, and 2019R2 before p20200430. It allows a user to provid CVE-2020-136526.1An issue was discovered in DigDash 2018R2 before p20200528, 2019R1 before p20200528, 2019R2 before p20200430, and 2020R1 before p20200507. A CVE-2020-136536.1An XSS vulnerability exists in the Webmail component of Zimbra Collaboration Suite before 8.8.15 Patch 11. It allows an attacker to inject e