WordPress Plugin Vulnerabilities

Related Sites 2.1 - Blind SQL Injection

Description

The related-sites WordPress plugin was affected by a Blind SQL Injection security vulnerability.

Affects Plugins

Plugin icon
related-sites
No known fix

References

CVE
CVE-2009-2383
Exploitdb
9054

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
95db032c-ccc3-496b-8473-67eeaa8feb24

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-11-28 (about 6 years ago)

Other

Published
Title
Published
2024-09-05
Title
LifterLMS < 7.7.6 - Authenticated (Admin+) SQL Injection
Published
2024-05-15
Title
Tutor LMS Pro < 2.7.1 - Missing Authorization to Privilege Escalation
Published
2021-07-15
Title
Woocommerce 3.3 to 5.5 - Authenticated Blind SQL Injection
Published
2024-08-16
Title
tagDiv Opt-In Builder < 1.5 - Authenticated (Admin+) SQL Injection
Published
2025-03-25
Title
Navigation Tree Elementor <= 1.0.1 - Authenticated (Subscriber+) SQL Injection