WordPress Plugin Vulnerabilities

Editorial Calendar 2.6 - Post Query Multiple Filter SQL Injection

Description

The Editorial Calendar WordPress plugin was affected by a Post Query Multiple Filter SQL Injection security vulnerability.

Affects Plugins

Plugin icon
editorial-calendar
Fixed in 2.7

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
b1b04efa-86fd-49d5-aa12-335535f03e22

Timeline

Publicly Published
2014-08-01 (about 9 years ago)
Added
2014-08-01 (about 9 years ago)
Last Updated
2015-05-15 (about 8 years ago)

Other

Published
Title
Published
2022-05-30
Title
Events Made Easy < 2.2.81 - Unauthenticated SQLi
Published
2024-03-25
Title
WooCommerce Customers Manager < 29.7 - Subscriber+ SQL Injection
Published
2016-07-19
Title
WordPress Video Player < 1.5.18 - Multiple Authenticated Blind SQL Injection
Published
2023-11-06
Title
GD Security Headers < 1.7.1 - Admin+ SQLi
Published
2021-10-26
Title
Ninja Forms < 3.6.4 - Admin+ SQL Injection