WordPress Plugin Vulnerabilities

Search Everything 7.0.2 - search-everything.php s Parameter SQL Injection

Description

The Search Everything WordPress plugin was affected by a search-everything.php s Parameter SQL Injection security vulnerability.

Affects Plugins

Plugin icon
search-everything
Fixed in 7.0.3

References

CVE
CVE-2014-2316

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
6a681c4e-2563-4903-a11b-27c3d9f00f2b

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2015-02-13
Title
Calendar by WD < 1.4.14 - Unauthenticated SQL Injection
Published
2014-08-01
Title
Contus Video Gallery 2.0 & 1.6 - SQL Injection
Published
2026-05-04
Title
WeePie Cookie Allow < 3.4.12 - Unauthenticated SQL Injection via 'consent' Parameter
Published
2024-08-16
Title
Tutor LMS < 2.7.3 - Authenticated (Administrator+) SQL Injection
Published
2022-01-05
Title
Rearrange Woocommerce Products < 3.0.8 - Subscriber+ SQL Injection