Lucene search
Ryan DewhurstPATCHSTACK:226983FFDAA07EFA5A1A39EF5C3D3D2EHistoryMar 16, 2015 - 12:00 a.m.
WordPress SEO by Yoast Plugin 1.7.3.3 - Blind SQL Injection
2015-03-1600:00:00
Ryan Dewhurst
patchstack.com
7
0.002 Low
EPSS
Percentile
61.4%
SEO by Yoast plugin is prone to a blind SQL injection vulnerability. This vulnerability is found “admin/class-bulk-editor-list-table.php”. Because of it, the orderby and order “get” parameters are not sufficiently sanitised before being used within a SQL query.
Solution
Update the plugin.
References
Related
prion
prion
Sql injection
2015-03-17 15:59:00
cve
cve
CVE-2015-2292
2015-03-17 15:59:00
checkpoint_advisories
checkpoint_advisories
WordPress SEO by Yoast Plugin SQL Injection (CVE-2015-2292)
2015-02-12 00:00:00
cvelist
cvelist
CVE-2015-2292
2015-03-17 15:00:00
dsquare
dsquare
WordPress Yoast SEO 1.7.3.3 SQL Injection
2015-10-15 00:00:00
nvd
nvd
CVE-2015-2292
2015-03-17 15:59:00
wpvulndb
wpvulndb
Yoast SEO <= 1.7.3.3 - Blind SQL Injection
2015-03-11 00:00:00
kaspersky
kaspersky
KLA10481 Multiple vulnerabilities in WordPress SEO plugin
2015-03-17 00:00:00