WordPress Plugin Vulnerabilities

Simple Retail Menus 4.0.1 - includes/mode-edit.php targetmenu Parameter SQL Injection

Description

The Simple Retail Menus WordPress plugin was affected by an includes/mode-edit.php targetmenu Parameter SQL Injection security vulnerability.

Affects Plugins

Plugin icon
simple-retail-menus
Fixed in 4.1

References

CVE
CVE-2014-5183

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
c946255c-a207-4fd7-b66e-03f2ce166da5

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-06-12
Title
Hydra Booking < 1.1.11 - Authenticated (Subscriber+) SQL Injection
Published
2015-04-28
Title
rtMedia for WordPress, BuddyPress & bbPress 3.7.39 - SQL Injection
Published
2025-10-30
Title
Attention Bar <= 0.7.2.1 - Contributor+ SQLi
Published
2015-07-28
Title
Email Before Download < 3.4.1 - SQL Injection
Published
2026-03-26
Title
Simply Schedule Appointments < 1.6.9.29 - Authenticated (Contributor+) SQL Injection