CVE-2014-3937 in Contextual Related Posts

Résumé

par MITRE

SQL injection vulnerability in the Contextual Related Posts plugin before 1.8.10.2 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Réserver: 02/06/2014
• Divulgation: 02/06/2014
• Modérer: accepté
• Entrée: VDB-69906
• CPE: prêt
• CWE: CWE-89 (confirmé)
• CVSS: 7.3 (VulDB)
• EPSS: 0.02031
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-3937
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-3937
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-3937/