WordPress Plugin Vulnerabilities

RLSWordPressSearch - register.php agentid Parameter SQL Injection

Description

The RLSWordPressSearch WordPress plugin was affected by a register.php agentid Parameter SQL Injection security vulnerability.

Affects Plugins

Plugin icon
RLSWordPressSearch
No known fix

References

URL
https://packetstormsecurity.com/files/#119938/

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
d255e482-38ff-4281-a724-3e45b92f3bdc

Timeline

Publicly Published
2014-08-01 (about 9 years ago)
Added
2014-08-01 (about 9 years ago)
Last Updated
2019-10-21 (about 4 years ago)

Other

Published
Title
Published
2016-11-12
Title
WP eCommerce <= 3.11.3 - SQL Injection in sessionid
Published
2023-07-24
Title
User Activity Log < 1.6.5 - Unauthenticated SQLi
Published
2022-02-10
Title
WP Statistics < 13.1.5 - Unauthenticated Blind SQL Injection
Published
2024-03-19
Title
GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress < 6.8.7 - Authenticated (Contributor+) SQL Injection via Shortcode
Published
2014-08-01
Title
Leaflet Maps Marker 3.5.2 - Two SQL Injection Vulnerabilities