WordPress Plugin Vulnerabilities

Cdnvote < 0.4.2 - Multiple SQL Injections

Description

The cdnvote WordPress plugin was affected by a Multiple SQL Injections security vulnerability.

Affects Plugins

Plugin icon
cdnvote
Fixed in 0.4.2

References

CVE
CVE-2011-5308
URL
https://www.immuniweb.com/advisory/HTB22845

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
569729fb-2560-4e24-96da-d19d4a493f38

Timeline

Publicly Published
2011-02-08 (about 15 years ago)
Added
2019-08-23 (about 6 years ago)
Last Updated
2019-11-28 (about 6 years ago)

Other

Published
Title
Published
2020-11-08
Title
Abandoned Cart Lite for WooCommerce < 5.8.3 - Unauthenticated SQL Injection
Published
2025-05-16
Title
Facturante < 1.13 - Unauthenticated SQL Injection
Published
2023-01-31
Title
GeoDirectory < 2.2.24 - Admin+ SQLi
Published
2021-06-16
Title
Filebird 4.7.3 - Unauthenticated SQL Injection
Published
2015-12-17
Title
Welcart e-Commerce < 1.5.3 - SQL Injection