Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Wow Viral Signups 2.1 WordPress plugin contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by exploiting the unescaped 'idsignup' POST parameter. Attackers can send crafted requests to the admin-ajax.php endpoint with malicious SQL payloads in the 'idsignup' parameter to read arbitrary data from the database.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-06-09 | 1 | Disclosure1 |
| 2026-07-26 | 1 | Patch1 |
🚨 HIGH: CVE-2017-20245 (CVSS 8.2) - SQL injection in Wow Viral Signups 2.1 WordPress plugin. Unauthenticated attackers can extract database data via admin-ajax[.]php endpoint. Uninstall or update immediately. #CVE #Vulnerability #PatchNow #WordPress https://t.co/gEIOoZNOxJ
Post summary
The tweet highlights a high‑severity SQL injection vulnerability in the Wow Viral Signups WordPress plugin and urges users to uninstall or update immediately.
CVE-2017-20245 Wow Viral Signups 2.1 WordPress plugin contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by exploiting the… https://www.cve.org/CVERecord?id=CVE-2017-20245
Post summary
This post discloses an SQL injection vulnerability in the Wow Viral Signups 2.1 WordPress plugin that permits unauthenticated database extraction, without providing PoC, exploit code, or patch information.