← WordPress Vulnerabilities
WordPress security by component

MOLIE

MOLIE is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Mar 14, 2022; the highest CVE/CNA score is 9.8.

Plugin slug: molie-instructure-canvas-linking-tool

CVE-2021-25007: MOLIE: SQL injection

MOLIE is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.

PublishedMar 14, 2022
Safe version guidanceSee mitigation notes
Safe version
Mar 14, 2022 CVE-2021-25007
MOLIE: SQL injection
MOLIE is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE9.8
NVD9.8
Mar 14, 2022 CVE-2021-25006
MOLIE: Cross-site scripting
MOLIE is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.1
NVD6.1