WordPress Plugin Vulnerabilities

WP Forum Server <= 1.7.3 - wpf-insert.php edit_post_id Parameter SQL Injection

Description

The WP Forum Server WordPress plugin was affected by a wpf-insert.php edit_post_id Parameter SQL Injection security vulnerability.

Affects Plugins

Plugin icon
forum-server
Fixed in 1.7.4

References

CVE
CVE-2012-6625
URL
https://packetstormsecurity.com/files/#112703/

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
89bc34b7-1924-4877-8107-00a11760d875

Timeline

Publicly Published
2014-08-01 (about 9 years ago)
Added
2014-08-01 (about 9 years ago)
Last Updated
2019-10-21 (about 4 years ago)

Other

Published
Title
Published
2014-08-01
Title
WP Symposium < 12.07.01 - Multiple SQL Injections
Published
2022-12-09
Title
WP RSS By Publishers <= 0.1 - Admin+ SQLi
Published
2022-10-17
Title
WP < 6.0.3 - SQLi in WP_Date_Query
Published
2019-07-22
Title
Email Subscribers & Newsletters < 4.1.8 - SQL Injection
Published
2023-05-16
Title
Multiple Page Generator < 3.3.18 - Admin+ SQLi