WordPress Plugin Vulnerabilities

Rockhoist Ratings 1.2.2 - wp-admin/admin-ajax.php postID Parameter SQL Injection

Description

The rockhoist-ratings WordPress plugin was affected by a wp-admin/admin-ajax.php postID Parameter SQL Injection security vulnerability.

Affects Plugins

Plugin icon
rockhoist-ratings
No known fix

References

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
48d39759-ca0b-4501-bae3-4a84f04a9eab

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-02-07
Title
Booking Calendar < 9.9.1 - Unauthenticated SQL Injection
Published
2021-07-30
Title
JiangQie Official Website Mini Program < 1.1.1 - Authenticated SQL Injection
Published
2025-03-28
Title
Slider by BestWebSoft < 1.1.1 - Authenticated (Administrator+) SQL Injection
Published
2012-11-05
Title
Ajax Post Search <= 1.3 - SQL Injection
Published
2024-09-30
Title
YITH WooCommerce Ajax Search < 2.8.1 - Unauthenticated SQL Injection