Themeisle WP Full Stripe Free SQL Injection Vulnerability

Vulnerability

A SQL injection vulnerability has been identified in the Themeisle WP Full Stripe Free plugin, affecting versions through 8.3.0. This vulnerability arises from improper neutralization of special elements used in SQL commands, allowing malicious actors to interact directly with the database, potentially leading to unauthorized data access or manipulation.

Impact

Exploitation of this vulnerability allows for SQL injection, enabling attackers to interact with the database. This could include unauthorized data access, data manipulation, or in some cases, executing administrative operations on the database.

Added: Sep 5, 2025, 3:16 PM
Updated: Sep 5, 2025, 6:59 PM

Vulnerability Rating

Custom Algorithm
spread
1.0
impact
2.5
exploitability
5.0
remediation
0.0
relevance
0.5
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.