WordPress Plugin Vulnerabilities

Easy Webinar - get_widget.php wid Parameter SQL Injection

Description

The webinar_plugin WordPress plugin was affected by a get_widget.php wid Parameter SQL Injection security vulnerability.

Affects Plugins

Plugin icon
webinar_plugin
Fixed in 1.6.7

References

Exploitdb
22300

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
adfe5ff2-3bfd-4ccf-8da4-2797e5de93c1

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-01-18
Title
Small Package Quotes – Worldwide Express Edition < 5.2.18 - Unauthenticated SQL Injection
Published
2021-07-24
Title
Paytm - Donation Plugin <= 1.3.2 - Authenticated (admin+) SQL Injection
Published
2025-01-29
Title
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory < 2.8.98 - Unauthenticated SQL Injection
Published
2022-04-11
Title
Multiple Shipping Address Woocommerce < 2.0 - Unauthenticated SQLi
Published
2014-08-01
Title
All Video Gallery - Multiple SQL Injection Vulnerabilities