CVE-2013-0735

2014-04-0218:00:00

flexera

www.cve.org

8.6 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.9%

JSON

Multiple SQL injection vulnerabilities in wpf.class.php in the Mingle Forum plugin before 1.0.34 for WordPress allow remote attackers to execute arbitrary SQL commands via the id parameter in a viewtopic (1) remove_post, (2) sticky, or (3) closed action or (4) thread parameter in a postreply action to index.php.