CVE-2015-4018

CVE-2015-4018 is a SQL injection vulnerability in the WordPress plugin FeedWordPress (affected: versions prior to 2015.0514). The flaw is in feedwordpresssyndicationpage.class.php and allows an authenticated attacker to inject arbitrary SQL via the link_ids[] parameter in the syndication Update a...

WordPress FeedWordPress Plugin - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: SQLi in FeedWordPress WordPress plugin Date: 2015-05-19 Exploit Author: Adrián M. F. Vendor Homepage: https://wordpress.org/plugins/feedwordpress/ Vulnerable version: 2015.0426 Fixed version: 2015.0514 CVE : CVE-2015-4018 1...

WordPress Plugin FeedWordPress 2015.0426 - SQL Injection

WordPress Plugin FeedWordPress 2015.0426 - SQL Injection Exploit Title: SQLi in FeedWordPress WordPress plugin Date: 2015-05-19 Exploit Author: Adrián M. F. Vendor Homepage: https://wordpress.org/plugins/feedwordpress/ Vulnerable version: 2015.0426 Fixed version: 2015.0514 CVE : CVE-2015-4018 1...

WordPress Plugin FeedWordPress 2015.0426 - SQL Injection

Exploit Title: SQLi in FeedWordPress WordPress plugin Date: 2015-05-19 Exploit Author: Adrián M. F. Vendor Homepage: https://wordpress.org/plugins/feedwordpress/ Vulnerable version: 2015.0426 Fixed version: 2015.0514 CVE : CVE-2015-4018 1 Authenticated SQLi CWE-89 -------------------------------...

FeedWordPress <= 2015.0426 - XSS & SQL-Injection

The FeedWordPress WordPress plugin was affected by a XSS & SQL-Injection security vulnerability...

WordPress FeedWordPress 2015.0426 SQL Injection

Exploit Title: SQLi in FeedWordPress WordPress plugin Date: 2015-05-19 Exploit Author: Adrián M. F. Vendor Homepage: https://wordpress.org/plugins/feedwordpress/ Vulnerable version: 2015.0426 Fixed version: 2015.0514 CVE : CVE-2015-4018 1 Authenticated SQLi CWE-89 -------------------------------...

Unspecified SQL Injection Vulnerability in WordPress Plugin FeedWordPress

WordPress is a set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up personal blog site.FeedWordPress is a WordPress Atom/RSS aggregator. An unspecified SQL injection vulnerability exists in the WordPress plugin FeedWordPress. An attacker ca...

FeedWordPress <= 2015.0426 - Cross-Site Scripting (XSS)

The FeedWordPress WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...