GCVE - cpe:2.3:a:sp_rental_manager:sp_rental

Approved changes feed: RSS · Atom

cpe:2.3:a:sp_rental_manager:sp_rental_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Sp Rental Manager (`d9ee6d63-c8cc-5cc6-ac69-228e0b7f7b63`)
Product	Sp Rental Manager (`b805102e-8f9c-570c-89e1-3a867cdb9fa8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-38324`	vulnerable	2026-06-08 05:32:55.894287	SP Rental Manager <= 1.5.3 Unauthenticated SQL Injection HIGH (8.2) The SP Rental Manager WordPress plugin is vulnerable to SQL Injection via the orderby parameter found in the ~/user/shortcodes.php file which allows attackers to retrieve information contained in a site's database, in versions up to and including 1.5.3. Published: 2021-09-09T18:09:53.452Z Updated: 2025-05-05T16:40:39.109Z Open on db.gcve.eu Reference links https://www.wordfence.com/vulnerability-advisories/#CVE-2021-38324 https://plugins.trac.wordpress.org/browser/sp-rental-manager/tags/1.5.3/user/shortcodes.php#L389	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.