WordPress Plugin Vulnerabilities

Zingiri Web Shop - Cookie SQL Injection

Description

The zingiri-web-shop WordPress plugin was affected by a Cookie SQL Injection security vulnerability.

Affects Plugins

Plugin icon
zingiri-web-shop
Fixed in 2.4.8

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
0149e7c7-6848-419c-9fef-fb4f62dd4f2e

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2014-08-01
Title
Ajax Gallery <= 3.0 - SQL Injection
Published
2017-01-28
Title
FormBuilder <= 1.0.7 - Multiple Authenticated SQL Injection
Published
2021-01-03
Title
Contact Form Submissions < 1.7.1 - Authenticated Double Query SQL injection
Published
2014-11-02
Title
GB Gallery Slideshow 1.5 - SQL Injection
Published
2024-02-15
Title
Sitepact's Contact Form 7 Extension For Klaviyo < 3.0.0 - Unauthenticated SQL Injection