WordPress Plugin Vulnerabilities

Plg Novana - wp-content/plugins/plg_novana/novana_detail.php id Parameter SQL Injection

Description

The plg_novana WordPress plugin was affected by a wp-content/plugins/plg_novana/novana_detail.php id Parameter SQL Injection security vulnerability.

Affects Plugins

Plugin icon
plg_novana
No known fix

References

URL
https://packetstormsecurity.com/files/#118324/
URL
https://exchange.xforce.ibmcloud.com/vulnerabilities/80258

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
1b2425b3-4432-4527-81c6-b44c55f907a7

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-01-24
Title
Premium Packages < 5.9.7 - Authenticated (Administrator+) SQL Injection
Published
2023-11-23
Title
WC Vendors Marketplace < 2.4.7.1 - Authenticated (Shop manager+) SQL Injection via search dates
Published
2024-05-31
Title
wpForo Forum < 2.3.4 - Authenticated (Contributor+) SQL Injection
Published
2025-01-06
Title
Altra Side Menu <= 2.0 - Admin+ SQL Injection
Published
2026-03-23
Title
Quiz and Survey Master (QSM) < 11.0.0 - Authenticated (Contributor+) SQL Injection via 'merged_question' Parameter