WordPress Plugin Vulnerabilities

WP DS FAQ <= 1.3.2 - ajax.php id Parameter SQL Injection

Description

The WP DS FAQ WordPress plugin was affected by an ajax.php id Parameter SQL Injection security vulnerability.

Affects Plugins

Plugin icon
wp-ds-faq
No known fix

References

Exploitdb
17683

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
874c034d-0588-482e-9b2b-ef33c4d9a069

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2023-04-13
Title
Neshan Maps <= 1.1.4 - Admin+ SQLi
Published
2024-03-21
Title
Easy Property Listings < 3.5.3 - Authenticated(Contributor+) SQL Injection via Shortcode
Published
2026-03-23
Title
Product Filter for WooCommerce by WBW < 3.1.3 - Unauthenticated SQLi
Published
2025-07-01
Title
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Time-Based SQL Injection via ‘bsa_pro_id'
Published
2015-07-07
Title
Contact Form Builder <= 1.0.24 - Authenticated Blind SQL Injection