WordPress Plugin Vulnerabilities

Allow PHP in Posts & Pages < 2.1.0 - SQL Injection

Description

The Allow PHP in Posts and Pages WordPress plugin was affected by a SQL Injection security vulnerability.

Affects Plugins

Plugin icon
allow-php-in-posts-and-pages
Fixed in 2.1.0

References

Exploitdb
17688

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
bc263a5c-cf36-4108-82a9-11e14748d28f

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-10-24
Title
League of Legends Shortcodes <= 1.0.1 - Authenticated (Contributor+) SQL Injection via Shortcode
Published
2023-10-30
Title
Superb slideshow gallery < 13.2 - Authenticated (Subscriber+) SQL Injection via Shortcode
Published
2025-01-16
Title
WordPress Google Map Professional <= 1.0 - Authenticated (Contributor+) SQL Injection
Published
2026-03-20
Title
Pre* Party Resource Hints <= 1.8.20 - Authenticated (Subscriber+) SQL Injection via 'hint_ids' Parameter
Published
2015-07-16
Title
Plugmatter Optin Feature Box <= 2.0.13 - Unauthenticated Blind SQL Injection