WordPress Plugin Vulnerabilities

Web Librarian < 3.5.5 - SQL Injection

Description

The WebLibrarian WordPress plugin was affected by a SQL Injection security vulnerability.

Affects Plugins

Plugin icon
weblibrarian
Fixed in 3.5.5

References

CVE
CVE-2019-1010034

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89
CVSS
6.5 (medium)

Miscellaneous

Verified
No
WPVDB ID
7a8d30cf-eefa-4941-b58a-1de1820d88ea

Timeline

Publicly Published
2019-07-16 (about 6 years ago)
Added
2019-08-21 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2022-04-12
Title
Order Listener for WooCommerce < 3.2.2 - Unauthenticated SQLi
Published
2025-03-31
Title
Shopper < 3.2.6 - Unauthenticated SQL Injection
Published
2025-10-21
Title
Email Tracker < 5.3.16 - Authenticated (Admin+) SQL Injection
Published
2015-04-23
Title
Ultimate Product Catalogue <= 3.1.2 - Unauthenticated SQL Injection
Published
2026-01-05
Title
Form Vibes – Database Manager for Forms < 1.5 - Authenticated (Admin+) SQL Injection