WordPress Plugin Vulnerabilities

WP-Syntax < 0.9.10 - Remote Comm& Execution

Description

The WP-Syntax WordPress plugin was affected by a Remote Comm& Execution security vulnerability.

Affects Plugins

Plugin icon
wp-syntax
Fixed in 0.9.10

References

CVE
CVE-2009-2852
Exploitdb
9431

Classification

Type
RCE
OWASP top 10
A1: Injection
CWE
CWE-94

Miscellaneous

Verified
No
WPVDB ID
04ec4f84-ea28-4268-a056-7febbf33c540

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-11-28 (about 6 years ago)

Other

Published
Title
Published
2025-08-04
Title
Eventer < 3.11.2.2 - Unauthenticated Arbitrary Shortcode Execution
Published
2014-08-01
Title
Kernel Theme - functions/upload-h&ler.php File Upload Remote Code Execution
Published
2025-09-26
Title
XStore < 9.6 - Unauthenticated Arbitrary Shortcode Execution
Published
2018-01-04
Title
buddypress-xprofile-custom-fields-type 2.6.3 - Authenticated Arbitrary File Deletion
Published
2025-07-10
Title
GB Forms DB < 1.0.3 - Unauthenticated Remote Code Execution