WordPress Plugin Vulnerabilities

Mingle Forum < 1.0.33 - Multiple SQL Injection

Description

The mingle-forum WordPress plugin was affected by a Multiple SQL Injection security vulnerability.

Affects Plugins

Plugin icon
mingle-forum
Fixed in 1.0.33

References

CVE
CVE-2012-5328
URL
https://plugins.trac.wordpress.org/changeset?reponame=&new=492859@mingle-forum&old=487353@mingle-forum

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
fda9d3c2-242f-4035-a347-93ca52bfa448

Timeline

Publicly Published
2012-01-20 (about 14 years ago)
Added
2019-08-26 (about 6 years ago)
Last Updated
2019-11-28 (about 6 years ago)

Other

Published
Title
Published
2026-02-04
Title
Popup builder with Gamification < 2.2.1 - Unauthenticated SQL Injection via Multiple REST API Endpoints
Published
2014-09-26
Title
All In One WP Security plugin 3.8.2 - 2xSQL Injections
Published
2024-12-06
Title
Beautiful Taxonomy Filters < 2.4.4 - Unauthenticated SQL Injection
Published
2024-04-05
Title
LearnPress Export Import < 4.0.4 - Authenticated (Administrator+) SQL Injection
Published
2022-02-08
Title
Fancy Product Designer < 4.7.5 - Admin+ SQL Injection