WordPress Plugin Vulnerabilities

WP RSS Poster 1.0.0 - wp-admin/admin.php wrp-add-new Page id Parameter SQL Injection

Description

The wp-rss-poster WordPress plugin was affected by a wp-admin/admin.php wrp-add-new Page id Parameter SQL Injection security vulnerability.

Affects Plugins

Plugin icon
wp-rss-poster
No known fix

References

CVE
CVE-2014-4938
URL
https://codevigilant.com/disclosure/wp-plugin-wp-rss-poster-a1-injection/

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
509a3a8c-5531-4aff-a407-9a8a033c11d2

Timeline

Publicly Published
2014-08-01 (about 9 years ago)
Added
2014-08-01 (about 9 years ago)
Last Updated
2019-10-21 (about 4 years ago)

Other

Published
Title
Published
2023-07-24
Title
Quasar form <= 6.1 - Subscriber+ SQLi
Published
2014-12-03
Title
Google Document Embedder <= 2.5.16 - SQL Injection
Published
2014-08-01
Title
store-locator-le - SQL Injection
Published
2021-11-22
Title
Ni WooCommerce Custom Order Status < 1.9.7 - Subscriber+ SQL Injection
Published
2022-12-12
Title
Multimedial Images <= 1.0b - Admin+ SQLi