WordPress Plugin Vulnerabilities

Website FAQ 1.0 - wp-admin/admin-ajax.php category Parameter SQL injection

Description

The website-faq WordPress plugin was affected by a wp-admin/admin-ajax.php category Parameter SQL injection security vulnerability.

Affects Plugins

Plugin icon
website-faq
No known fix

References

Exploitdb
19400

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
f587b569-2d40-427c-a332-a7a2c2776c28

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-03-26
Title
Photos and Files Contest Gallery < 21.3.2.1 - Authenticated (Contributor+) SQL Injection
Published
2025-02-24
Title
Private Content <= 8.11.5 - Authenticated (Subscriber+) SQL Injection
Published
2024-04-25
Title
WooCommerce Amazon Affiliates < 14.0.31 - Unauthenticated SQL Injection
Published
2014-08-01
Title
Count per Day < 3.0 - SQL Injection
Published
2025-06-23
Title
Amely < 3.2.0 - Unauthenticated SQL Injection