WordPress Plugin Vulnerabilities

Global Content Blocks <= 1.2 - SQL Injection

Description

The global-content-blocks WordPress plugin was affected by a SQL Injection security vulnerability.

Affects Plugins

Plugin icon
global-content-blocks
No known fix

References

Exploitdb
17687

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
812a21f5-1015-4f79-8817-44b18ce080d9

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-02-11
Title
Ebook Downloader <= 1.0 - Unauthenticated SQL Injection
Published
2014-08-01
Title
Photoracer <= 1.0 - SQL Injection
Published
2023-12-21
Title
BookingPress < 1.0.73 - Authenticated (Contributor+) SQL Injection
Published
2024-12-23
Title
Booking Calendar WpDevArt < 3.2.20 - Authenticated (Contributor+) SQL Injection
Published
2023-06-19
Title
MStore API < 3.9.8 - Unauthenticated Blind SQLi