WordPress Plugin Vulnerabilities

Contus HD FLV Player <= 1.3 - SQL Injection

Description

The contus-hd-flv-player WordPress plugin was affected by a SQL Injection security vulnerability.

Affects Plugins

Plugin icon
contus-hd-flv-player
No known fix

References

Exploitdb
17678

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
84c7f35a-e9f4-4c78-90c5-6ff01826870e

Timeline

Publicly Published
2011-08-17 (about 14 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2023-11-28
Title
WP Mail Log < 1.1.3 – Contributor+ SQL Injection in wml_logs/send_mail endpoint
Published
2014-08-01
Title
IndiaNIC FAQs Manager 1.0 - Blind SQL Injection
Published
2024-08-28
Title
Super Store Finder < 6.9.8 - Authenticated (Subscriber+) SQL Injection
Published
2026-02-17
Title
Taskbuilder < 5.0.3 - Authenticated (Subscriber+) SQL Injection via 'order' and 'sort_by' Parameters
Published
2025-07-24
Title
ProfileGrid < 5.9.5.4 - Authenticated (Subscriber+) SQL Injection