WordPress Plugin Vulnerabilities

WP Realty - MySQL Time Based Injection

Description

The wp-realty WordPress plugin was affected by a MySQL Time Based Injection security vulnerability.

Affects Plugins

Plugin icon
wp-realty
No known fix

References

Exploitdb
29021
URL
https://packetstormsecurity.com/files/#123655/

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
9369bcca-e89a-4af5-9529-c32d4f011afd

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2023-05-30
Title
Tutor LMS < 2.2.1 - Student+ SQL Injection
Published
2026-02-18
Title
Product Table and List Builder for WooCommerce Lite < 4.6.3 - Unauthenticated Time-Based SQL Injection via 'search' Parameter
Published
2026-03-10
Title
WP Maps < 4.9.2 - Unauthenticated SQL Injection via 'location_id' Parameter
Published
2026-03-04
Title
Apocalypse Meow < 23.0.0 - Authenticated (Administrator+) SQL Injection via 'type' Parameter
Published
2025-12-01
Title
WP Directory Kit < 1.4.7 - Authenticated (Admin+) SQL Injection