WordPress Vulnerabilities

WordPress <= 1.5.1.1 - "add new admin" SQL Injection

Affects WordPress

1.5.1.1
No known fix

References

Exploitdb
1059

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
f8e90881-76c7-4bc8-b15a-a102f752b2ec

Timeline

Publicly Published
2014-08-01 (about 9 years ago)
Added
2014-08-01 (about 9 years ago)
Last Updated
2020-10-25 (about 3 years ago)

Other

Published
Title
Published
2018-02-22
Title
Custom Permalinks <= 1.1 - Authenticated SQL Injection
Published
2014-08-01
Title
WP RSS Poster 1.0.0 - wp-admin/admin.php wrp-add-new Page id Parameter SQL Injection
Published
2023-03-22
Title
Events Made Easy <= 2.3.14 - Subscriber+ SQLi
Published
2024-02-27
Title
Conversios < 7.0.8 - Subscriber+ SQL Injection via ee_syncProductCategory
Published
2024-03-28
Title
WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting <= 1.12.9 - Authenticated (Subscriber+) SQL Injection