WordPress Plugin Vulnerabilities

Simple Forum 2.0-2.1 - SQL Injection

Description

The sf-forum WordPress plugin was affected by a SQL Injection security vulnerability.

Affects Plugins

Plugin icon
sf-forum
No known fix

References

Exploitdb
5126

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
ad5ed9f0-1b62-43c2-af31-81fc5c1b243d

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2014-08-01
Title
Paid Business Listings - Blind SQL Injection
Published
2023-03-22
Title
Gift Voucher < 4.3.3 - Subscriber+ SQLi
Published
2025-04-10
Title
Cost Calculator Builder < 3.2.68 - Authenticated (Subscriber+) SQL Injection via order_ids Parameter
Published
2025-12-30
Title
FooEvents for WooCommerce < 1.20.5 - Authenticated (Subscriber+) SQL Injection
Published
2026-02-13
Title
PhotoStack Gallery <= 0.4.1 - Unauthenticated SQL Injection via 'postid' Parameter