WordPress Plugin Vulnerabilities

wp-private-messages - /wp-admin/profile.php msgid Parameter SQL Injection

Description

The wp-private-messages WordPress plugin was affected by a /wp-admin/profile.php msgid Parameter SQL Injection security vulnerability.

Affects Plugins

Plugin icon
wp-private-messages
No known fix

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
d0bc77e7-972b-4349-a882-6f25f8e8a538

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2024-12-05
Title
KiviCare – Clinic & Patient Management System (EHR) < 3.6.5 - Authenticated (Doctor/Receptionist+) SQL Injection
Published
2026-01-13
Title
Shipping Rate By Cities < 2.0.1 - Unauthenticated SQL Injection via 'city' Parameter
Published
2016-05-14
Title
WP-EMail <= 2.67.1 - SQL Injection
Published
2019-07-11
Title
FV Flowplayer Video Player < 7.3.19.727 - SQL Injection
Published
2017-07-06
Title
DSubscribers <= 1.2 - Authenticated SQL Injection