Lucene search
Anant ShrivastavaPATCHSTACK:3E963B43D734ACBBD3F06AB57EAFD0F2HistoryAug 06, 2014 - 12:00 a.m.
WordPress Simple Retail Menus Plugin <= 4.0 - SQL Injection
2014-08-0600:00:00
Anant Shrivastava
patchstack.com
7
EPSS
0.001
Percentile
46.2%
Because of this vulnerability in includes/mode-edit.php, remote authenticated editors can execute arbitrary SQL commands in an edit action to wp-admin/admin.php via the “targetmenu” parameter.
Solution
Update the plugin.
Related
prion
prion
Sql injection
2014-08-06 19:55:00
cvelist
cvelist
CVE-2014-5183
2014-08-06 19:00:00
wpvulndb
wpvulndb
cve
cve
CVE-2014-5183
2014-08-06 19:55:04
nvd
nvd
CVE-2014-5183
2014-08-06 19:55:04