WordPress Plugin Vulnerabilities

Spider Facebook < 1.0.10 - Authenticated SQL Injection

Description

The WDSocialWidgets WordPress plugin was affected by an Authenticated SQL Injection security vulnerability.

Affects Plugins

Plugin icon
spider-facebook
Fixed in 1.0.10

References

URL
https://packetstormsecurity.com/files/#128177/

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Submitter
pvdl
Verified
No
WPVDB ID
452ea4b3-a067-4af0-81d0-e95eb8368ee4

Timeline

Publicly Published
2014-09-07 (about 9 years ago)
Added
2014-10-08 (about 9 years ago)
Last Updated
2019-10-21 (about 4 years ago)

Other

Published
Title
Published
2018-08-16
Title
Chained Quiz <= 1.0.8 - Unauthenticated SQL Injection
Published
2014-08-01
Title
TagGator - 'tagid' Parameter SQL Injection
Published
2014-08-01
Title
Collision Testimonials <= 3.0 - SQL Injection
Published
2014-08-01
Title
post highlights <= 2.2 - SQL Injection
Published
2014-08-01
Title
myLDlinker - SQL Injection