WordPress Plugin Vulnerabilities

WP RSS Multi Importer <= 3.15 - Blind SQL Injection & Cross-Site Scripting (XSS)

Description

The wp-rss-multi-importer WordPress plugin was affected by a Blind SQL Injection & Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
wp-rss-multi-importer
No known fix

References

URL
http://cinu.pl/research/wp-plugins/mail_a943eb296f61b86959ad881d7ef93687.html
URL
http://blog.cinu.pl/2015/11/php-static-code-analysis-vs-top-1000-wordpress-plugins.html

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
d4dc5cd8-b9d9-4ff1-aa8a-09870a07feb3

Timeline

Publicly Published
2015-11-21 (about 10 years ago)
Added
2015-11-22 (about 10 years ago)
Last Updated
2019-10-31 (about 6 years ago)

Other

Published
Title
Published
2014-08-01
Title
Let Them Unsubscribe 1.0 - let-them-unsubscribe.php Multiple Unspecified Issues
Published
2020-03-24
Title
Data Tables Generator By Supsystic < 1.9.92 - CSRF to Stored XSS, Data Table Creations, Settings Modification
Published
2019-07-11
Title
One Click SSL <= 1.4.6 - Multiple Issues
Published
2014-12-14
Title
WP-FB-AutoConnect <= 4.0.5 - XSS/CSRF
Published
2019-07-19
Title
Adaptive Images for WordPress <= 0.6.66 - Local File Inclusion & Deletion