VIR Vulnerability Intelligence Relay

CVE-2017-1002023

critical
Published 2017-09-14 · Modified 2026-05-13
CVSS v3
9.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2
7.5
VIR risk
9.8

Description

Vulnerability in wordpress plugin Easy Team Manager v1.3.2, The code does not sanitize id before making it part of an SQL statement in file ./easy-team-manager/inc/easy_team_manager_desc_edit.php

Predictions

Exploit likelihood
97%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: larry0@me.com — http://www.vapidlabs.com/advisory.php?v=194

Application impact
VendorProductVersionsFixed
daisythemeseasy_team_manager1.3.2

References

CWEs

CWE-89

Verify integrity in audit chain (admin only). AS-IS.