Bbs E Franchise
Approved changes feed: RSS · Atom
cpe:2.3:a:bbsetheme:bbs_e-franchise:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Bbsetheme (e3ab5ff8-7c0d-53b0-84c8-4ce9acb2ba29) |
|---|---|
| Product | Bbs E Franchise (7ab0687e-3219-57cc-9555-1f65bb383197) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-20072 |
vulnerable | 2026-07-28 18:32:21.552370 |
BBS e-Franchise 1.1.1 WordPress Plugin SQL Injection via uid
HIGH (8.2)
BBS e-Franchise 1.1.1 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the uid parameter. Attackers can craft requests to pages using the plugin's shortcode with UNION-based SQL injection in the uid parameter to extract sensitive data from the WordPress database including user information and taxonomy terms.
Published: 2026-06-15T12:00:41.643Z
Updated: 2026-06-15T15:12:49.919Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.