WordPress Plugin Vulnerabilities

WP DS FAQ Plus - Unspecified SQL Injection

Description

The WP DS FAQ Plus WordPress plugin was affected by an Unspecified SQL Injection security vulnerability.

Affects Plugins

Plugin icon
wp-ds-faq-plus
Fixed in 1.0.0

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
7e3e8335-5a09-4261-94d3-4f7314b943f9

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2025-09-10
Title
Smartcat Translator for WPML < 3.1.73 - Authenticated (Author+) SQL Injection via orderby Parameter
Published
2026-03-12
Title
WOLF – WordPress Posts Bulk Editor and Manager Professional < 1.0.9 - Authenticated (Editor+) SQL Injection
Published
2023-02-27
Title
Slimstat Analytics < 4.9.3.3 - Subscriber+ SQL Injection
Published
2023-10-30
Title
Up down image slideshow gallery < 12.1 - Authenticated (Subscriber+) SQL Injection via Shortcode
Published
2021-01-28
Title
uListing < 1.7 - Unauthenticated SQL Injections