WordPress Plugin Vulnerabilities

yolink Search <= 1.1.4 - includes/bulkcrawl.php Multiple Parameter SQL Injection

Description

The yolink Search for WordPress WordPress plugin was affected by an includes/bulkcrawl.php Multiple Parameter SQL Injection security vulnerability.

Affects Plugins

Plugin icon
yolink-search
No known fix

References

Exploitdb
17757

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
eb889def-c1fb-458f-9935-0dc8612b09b1

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-03-21
Title
WooCommerce Multivendor Marketplace – REST API < 1.6.3 - Authenticated (Subscriber+) SQL Injection
Published
2026-04-07
Title
Attendance Manager <= 0.6.2 - Authenticated (Subscriber+) SQL Injection via 'attmgr_off' Parameter
Published
2023-06-30
Title
SP Project & Document Manager < 4.68 - Subscriber+ SQLi
Published
2025-07-01
Title
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated SQL Injection via oid
Published
2014-08-01
Title
IndiaNIC FAQs Manager 1.0 - Blind SQL Injection