WordPress Plugin Vulnerabilities

Zenphoto 1.4.5.2 - wordpress_import.php wp_prefix Function SQL Injection

Description

The zenphoto WordPress plugin was affected by a wordpress_import.php wp_prefix Function SQL Injection security vulnerability.

Affects Plugins

Plugin icon
zenphoto
Fixed in 1.4.5.4

References

URL
https://packetstormsecurity.com/files/#123501/
URL
https://seclists.org/bugtraq/2013/Oct/20

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
d4e59481-2638-4091-ae21-b47a767483e2

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-02-12
Title
MoveTo <= 6.2 - Unauthenticated SQL Injection
Published
2023-05-23
Title
Multiple Page Generator – MPG < 3.3.20 - SQL Injection
Published
2024-01-12
Title
WP Testimonials < 1.4.4 - Authenticated (Contributor+) SQL Injection
Published
2024-10-25
Title
RSVP ME <= 1.9.9 - Unauthenticated SQL Injection
Published
2019-07-25
Title
Blog2Social < 5.6.0 - SQL Injection