WordPress Plugin Vulnerabilities

Mz-jajak <= 2.1 - index.php id Parameter SQL Injection

Description

The mz-jajak WordPress plugin was affected by an index.php id Parameter SQL Injection security vulnerability.

Affects Plugins

Plugin icon
mz-jajak
No known fix

References

Exploitdb
20416

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
e0f60247-6937-46a5-b64d-ddd5d7c77bd6

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2018-02-22
Title
Custom Permalinks <= 1.1 - Authenticated SQL Injection
Published
2025-12-01
Title
VikRentCar Car Rental Management System < 1.4.5 - Authenticated (Author+) SQL Injection via 'month' Parameter
Published
2014-08-01
Title
BuddyPress 1.7.1 - Multiple SQL Injections
Published
2025-02-23
Title
Wishlist < 1.0.42 - Authenticated (Contributor+) SQL Injection
Published
2025-09-26
Title
LambertGroup - AllInOne - Banner with Playlist <= 3.8 - Authenticated (Contributor+) SQL Injection