High severity7.5NVD Advisory· Published Feb 11, 2020· Updated Jun 17, 2026

CVE-2020-8596

Description

participants-database.php in the Participants Database plugin 1.9.5.5 and previous versions for WordPress has a time-based SQL injection vulnerability via the ascdesc, list_filter_count, or sortBy parameters. It is possible to exfiltrate data and potentially execute code (if certain conditions are met).

Affected products

WordPress/Participants Databasedescription
WordPress/Participants Databasellm-fuzzy
Range: <=1.9.5.5
Package: https://wordpress.org/plugins/participants-database

Patches

Vulnerability mechanics

References

blog.impenetrable.tech/cve-2020-8596nvdThird Party Advisory
wpvulndb.com/vulnerabilities/10068nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000