WordPress Plugin Vulnerabilities

plugin WP-Forum 1.7.8 - Remote SQL Injection

Description

The wpforum WordPress plugin was affected by a Remote SQL Injection security vulnerability.

Affects Plugins

Plugin icon
wpforum
No known fix

References

Exploitdb
7738

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
a723a812-3be3-4824-a5e1-bbc18b3bad93

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-02-12
Title
Malware Scanner < 4.7.3 - Admin+ SQLi
Published
2022-04-28
Title
Hermit <= 3.1.6 - Unauthenticated SQLi
Published
2021-07-23
Title
Easy Testimonial Manager <= 1.2.0 - Authenticated SQL Injection
Published
2022-06-16
Title
Pricing Deals for WooCommerce < 2.0.3 - Unauthenticated SQLi
Published
2026-01-13
Title
Shipping Rates by City for WooCommerce <= 1.0.3 - Authenticated (Shop Manager+) SQL Injection via 'cities' Parameter