critical9.8Public exploit code
CVE-2015-3313
SQL injection vulnerability in WordPress Community Events plugin before 1.4.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WordPress Plugin Community Events 1.3.5 - SQL Injection2015-04-21 · webapps · php
Impact
SQL injection vulnerability in WordPress Community Events plugin before 1.4.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Community Events Project | Community Events | through 1.3.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/131530/WordPress-Community-Events-1.3.5-SQL-Injection.html
- http://www.openwall.com/lists/oss-security/2015/04/16/10
- http://www.openwall.com/lists/oss-security/2015/05/08/3
- http://www.securityfocus.com/bid/74234
- https://wordpress.org/plugins/community-events/#developers
- https://www.exploit-db.com/exploits/36805/
- http://packetstormsecurity.com/files/131530/WordPress-Community-Events-1.3.5-SQL-Injection.html
- http://www.openwall.com/lists/oss-security/2015/04/16/10
- http://www.openwall.com/lists/oss-security/2015/05/08/3
- http://www.securityfocus.com/bid/74234
- https://wordpress.org/plugins/community-events/#developers
- https://www.exploit-db.com/exploits/36805/