CVE-2014-2316

7.5

HIGHCVSS v2

Published

March 9, 2014

Affected

3 projects

Assigned by

MITRE

Severity scale

010

Description

SQL injection vulnerability in se_search_default in the Search Everything plugin before 7.0.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the s parameter to index.php. NOTE: some of these details are obtained from third party information.

WordPress/WordPress

GitHubWordPress, Git-ified. This repository is just a mirror of the WordPress subversion repository. Please do not send pull requests. Submit pull requests to https://github.com/WordPress/wordpress-develop and patches to https://core.trac.wordpress.org/ instead.

all versionsNVD

wordpress

NPMA client for working with WordPress.

all versionsNVD

wordpress

More on this CVE

NVD↗GitHub Advisory↗

RubyGemsThe Wordpress gem provides posting to a Wordpress.com blog or a self hosted wordpress by providing your username, password, login url(if you host your blog) and your blog content. With this gem, you have access to add a text entry on Wordpress blog by providing these options: title text, body text, and a tag array. You must include at least title text or body text with your post. Posting images with posts, posting only images and pulling down your posts will be available very soon.

all versionsNVD

Security Advisories

CVE-2014-2316

Description

More on this CVE