WordPress Plugin Vulnerabilities

Wp-ImageZoom - zoom.php id Parameter SQL Injection

Description

The Wp-ImageZoom WordPress plugin was affected by a zoom.php id Parameter SQL Injection security vulnerability.

Affects Plugins

Plugin icon
wp-imagezoom
Fixed in 1.1.0

References

URL
https://exchange.xforce.ibmcloud.com/vulnerabilities/80285

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
131433b4-5962-4fb0-8181-65d9383242a1

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-04-05
Title
ENL Newsletter <= 1.0.1 - Admin+ SQL Injection
Published
2025-03-01
Title
Bitcoin / AltCoin Payment Gateway for WooCommerce <= 1.7.6 - Unauthenticated SQL Injection
Published
2021-09-21
Title
Game Server Status <= 1.0 - Contributor+ SQL Injection
Published
2021-08-22
Title
Responsive 3D Slider <= 1.2 - Authenticated SQL Injection
Published
2023-04-19
Title
The School Management < 4.2 - Admin+ SQLi