WordPress Plugin Vulnerabilities

Note Press < 0.1.2 - SQL Injection

Description

The Note Press WordPress plugin was affected by a SQL Injection security vulnerability.

Affects Plugins

Plugin icon
note-press
Fixed in 0.1.2

References

CVE
CVE-2017-18548

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89
CVSS
9.8 (critical)

Miscellaneous

Verified
Yes
WPVDB ID
ef947e41-1aa5-4056-bec9-2e58df2e96ad

Timeline

Publicly Published
2017-02-26 (about 9 years ago)
Added
2019-08-21 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2024-02-23
Title
Ultimate Member 2.1.3 - 2.8.2 - Unauthenticated SQL Injection
Published
2017-11-03
Title
Events <= 2.3.4 - Authenticated SQL Injection
Published
2024-05-23
Title
Search & Replace < 3.2.2 - Admin+ SQL injection
Published
2025-05-07
Title
Dynamic Pricing With Discount Rules for WooCommerce < 4.5.9 - Authenticated (Shop manager+) SQL Injection
Published
2025-04-22
Title
Message Filter for Contact Form 7 < 1.6.33 - Authenticated (Administrator+) SQL Injection