WordPress Plugin Vulnerabilities
10Web Social Post Feed < 1.1.27 - Authenticated SQL Injection
Description
Authenticated SQL injection in the 10Web Social Post Feed WordPress Plugin 1.1.26 via the /wordpress/wp-admin/admin.php?page=info_ffwd search_value parameter.
Proof of Concept
Affects Plugins
Fixed in 1.1.27 References
Classification
Type
SQLI
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Vu Tien Hoa - SunCSR (Sun* Cyber Security Research)
Submitter
Vu Tien Hoa
Submitter website
Submitter twitter
Verified
Yes
WPVDB ID
Timeline
Publicly Published
2020-09-11 (about 5 years ago)
Added
2020-09-11 (about 5 years ago)
Last Updated
2020-09-11 (about 5 years ago)
WPScan 