Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

CVE-2014-7959

🗓️ 06 Nov 2014 15:00:00Reported by mitreType 
cve
 cve🔗 web.nvd.nist.gov👁 67 Views🌐 WEB

CVE-2014-7959 SQL injection in BulletProof Security plugin for WordPres

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
zdt
zdt		WordPress Bulletproof-Security .51 Multiple Vulnerabilities
6 Nov 201400:00
–zdt
cvelist
Cvelist		CVE-2014-7959
6 Nov 201415:00
–cvelist
euvd
EUVD		EUVD-2014-7809
7 Oct 202500:30
–euvd
nvd
NVD		CVE-2014-7959
6 Nov 201415:55
–nvd
packetstorm
Packet Storm		WordPress Bulletproof-Security .51 XSS / SQL Injection / SSRF
5 Nov 201400:00
–packetstorm
patchstack
Patchstack		WordPress BulletProof Security Plugin <= .51 - SQL Injection
7 Oct 201400:00
–patchstack
prion
Prion		Sql injection
6 Nov 201415:55
–prion
securityvulns
securityvulns		Wordpress bulletproof-security &lt;=.51 multiple vulnerabilities
1 Dec 201400:00
–securityvulns
securityvulns
securityvulns		Web applications security vulnerabilities summary &#40;PHP, ASP, JSP, CGI, Perl&#41;
1 Dec 201400:00
–securityvulns
wpvulndb
WPVulnDB		BulletProof Security <= .51 - Multiple Vulnerabilities (XSS & SSRF)
5 Nov 201400:00
–wpvulndb
NVD
Node
OR
ait-probulletproof_securityMatch.44wordpress
ait-probulletproof_securityMatch.44.1wordpress
ait-probulletproof_securityMatch.45wordpress
ait-probulletproof_securityMatch.45.1wordpress
ait-probulletproof_securityMatch.45.2wordpress
ait-probulletproof_securityMatch.45.3wordpress
ait-probulletproof_securityMatch.45.4wordpress
ait-probulletproof_securityMatch.45.5wordpress
ait-probulletproof_securityMatch.45.6wordpress
ait-probulletproof_securityMatch.45.7wordpress
ait-probulletproof_securityMatch.45.8wordpress
ait-probulletproof_securityMatch.45.9wordpress
ait-probulletproof_securityMatch.46wordpress
ait-probulletproof_securityMatch.46.1wordpress
ait-probulletproof_securityMatch.46.2wordpress
ait-probulletproof_securityMatch.46.3wordpress
ait-probulletproof_securityMatch.46.4wordpress
ait-probulletproof_securityMatch.46.5wordpress
ait-probulletproof_securityMatch.46.6wordpress
ait-probulletproof_securityMatch.46.7wordpress
ait-probulletproof_securityMatch.46.8wordpress
ait-probulletproof_securityMatch.46.9wordpress
ait-probulletproof_securityMatch.47wordpress
ait-probulletproof_securityMatch.47.1wordpress
ait-probulletproof_securityMatch.47.2wordpress
ait-probulletproof_securityMatch.47.3wordpress
ait-probulletproof_securityMatch.47.4wordpress
ait-probulletproof_securityMatch.47.5wordpress
ait-probulletproof_securityMatch.47.6wordpress
ait-probulletproof_securityMatch.47.7wordpress
ait-probulletproof_securityMatch.47.8wordpress
ait-probulletproof_securityMatch.47.9wordpress
ait-probulletproof_securityMatch.48wordpress
ait-probulletproof_securityMatch.48.1wordpress
ait-probulletproof_securityMatch.48.2wordpress
ait-probulletproof_securityMatch.48.3wordpress
ait-probulletproof_securityMatch.48.4wordpress
ait-probulletproof_securityMatch.48.5wordpress
ait-probulletproof_securityMatch.48.6wordpress
ait-probulletproof_securityMatch.48.7wordpress
ait-probulletproof_securityMatch.48.8wordpress
ait-probulletproof_securityMatch.48.9wordpress
ait-probulletproof_securityMatch.49wordpress
ait-probulletproof_securityMatch.49.1wordpress
ait-probulletproof_securityMatch.49.2wordpress
ait-probulletproof_securityMatch.49.3wordpress
ait-probulletproof_securityMatch.49.4wordpress
ait-probulletproof_securityMatch.49.5wordpress
ait-probulletproof_securityMatch.49.6wordpress
ait-probulletproof_securityMatch.49.7wordpress
ait-probulletproof_securityMatch.49.8wordpress
ait-probulletproof_securityMatch.49.9wordpress
ait-probulletproof_securityMatch.50wordpress
ait-probulletproof_securityMatch.50.1wordpress
ait-probulletproof_securityMatch.50.2wordpress
ait-probulletproof_securityMatch.50.3wordpress
ait-probulletproof_securityMatch.50.4wordpress
ait-probulletproof_securityMatch.50.5wordpress
ait-probulletproof_securityMatch.50.6wordpress
ait-probulletproof_securityMatch.50.7wordpress
ait-probulletproof_securityMatch.50.8wordpress
ait-probulletproof_securityMatch.50.9wordpress
ait-probulletproof_securityMatch.51wordpress
ParameterPositionPathDescriptionCWE
dbhostrequest bodywp-content/plugins/bulletproof-security/admin/htaccess/bpsunlock.phpXSS vulnerability demonstrated via payload in dbhost parameterCWE-89
dbnamerequest bodywordpress/wp-content/plugins/bulletproof-security/admin/htaccess/bpsunlock.phpSQL injection vulnerability demonstrated via database connection fields and tableprefix payloadCWE-89
dbuserrequest bodywordpress/wp-content/plugins/bulletproof-security/admin/htaccess/bpsunlock.phpSQL injection vulnerability demonstrated via database connection fields and tableprefix payloadCWE-89
dbpasswordrequest bodywordpress/wp-content/plugins/bulletproof-security/admin/htaccess/bpsunlock.phpSQL injection vulnerability demonstrated via database connection fields and tableprefix payloadCWE-89
dbhostrequest bodywordpress/wp-content/plugins/bulletproof-security/admin/htaccess/bpsunlock.phpSQL injection vulnerability demonstrated via database connection fields and tableprefix payloadCWE-89
tableprefixrequest bodywordpress/wp-content/plugins/bulletproof-security/admin/htaccess/bpsunlock.phpSQL injection vulnerability demonstrated via database connection fields and tableprefix payloadCWE-89
usernamerequest bodywordpress/wp-content/plugins/bulletproof-security/admin/htaccess/bpsunlock.phpSQL injection vulnerability demonstrated via database connection fields and tableprefix payloadCWE-89
Login-Security-Unlockrequest bodywordpress/wp-content/plugins/bulletproof-security/admin/htaccess/bpsunlock.phpSQL injection vulnerability demonstrated via database connection fields and tableprefix payloadCWE-89
dbnamerequest bodywp-content/plugins/bulletproof-security/admin/htaccess/bpsunlock.phpSSRF vulnerability demonstrated via host parameter leading to remote database accessCWE-89
dbuserrequest bodywp-content/plugins/bulletproof-security/admin/htaccess/bpsunlock.phpSSRF vulnerability demonstrated via host parameter leading to remote database accessCWE-89
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 00:16Current
8.1High risk
Vulners AI Score8.1
CVSS 26.5
EPSS0.021
CWE-89
cve20147959sql injectionadminhtaccessbpsunlock.phpbulletproof securitywordpress
67