WordPress Plugin Vulnerabilities

LeagueManager <= 3.9.11 - Unauthenticated SQL Injection

Description

The LeagueManager WordPress plugin was affected by an Unauthenticated SQL Injection security vulnerability.

Affects Plugins

Plugin icon
leaguemanager
No known fix

References

Exploitdb
37182
URL
https://packetstormsecurity.com/files/#132123/

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Submitter
pvdl
Verified
No
WPVDB ID
f3be48f5-ae2c-4e27-80ca-664829b8fba3

Timeline

Publicly Published
2015-06-02 (about 10 years ago)
Added
2015-06-02 (about 10 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-10-02
Title
WPRecovery <= 2.0 - Unauthenticated SQL Injection to Arbitrary File Deletion
Published
2014-08-01
Title
BSK PDF Manager < 1.5 - Multiple Authenticated SQL Injections
Published
2024-10-24
Title
League of Legends Shortcodes <= 1.0.1 - Authenticated (Contributor+) SQL Injection via Shortcode
Published
2022-10-03
Title
Blog2Social < 6.9.10 - Subscriber+ SQLi
Published
2024-04-03
Title
REHub Framework < 19.6.2 - Authenticated (Subscriber+) SQL Injection