WordPress Plugin Vulnerabilities

Capability Manager Enhanced <= 1.5.8 - Authenticated SQLi

Description

The PublishPress Capabilities: Manage WordPress Permissions and Edit User Roles WordPress plugin was affected by an Authenticated SQLi security vulnerability.

Affects Plugins

Plugin icon
capability-manager-enhanced
Fixed in 1.5.9

References

URL
https://plugins.trac.wordpress.org/changeset/1912433

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
7a06a861-4262-406c-9156-dfa7d2966678

Timeline

Publicly Published
2018-09-25 (about 7 years ago)
Added
2019-07-18 (about 6 years ago)
Last Updated
2019-07-18 (about 6 years ago)

Other

Published
Title
Published
2023-01-23
Title
WP TripAdvisor Review Slider < 10.8 - Subscriber+ SQLi
Published
2014-08-01
Title
WordPress Landing Pages < 1.2.3 - module.utils.php post Parameter SQL Injection
Published
2024-10-31
Title
Simple Job Manager <= 1.1 - Authenticated (Contributor+) SQL Injection
Published
2025-05-07
Title
Productive Commerce <= 1.1.38 - Unauthenticated SQL Injection
Published
2021-11-15
Title
Modern Events Calendar < 6.1.5 - Unauthenticated Blind SQL Injection