CVE-2014-125091: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in codepeople cp-polls Plugin 1.0.1 on WordPress and classified as critical. This vulnerability affects unknown code of the file cp-admin-int-message-list.inc.php. The manipulation of the argument lu leads to sql injection. The attack can be initiated remotely...

CVE-2021-42361: Improper Neutralization of Input During Web Page Generation

The Contact Form Email WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and escaping via the name parameter found in the /trunk/cp-admin-int-list.inc.php file which allowed attackers with administrative user access to inject arbitrary web scripts,...

PT-2015-7521

Name of the Vulnerable Software and Affected Versions Appointment Booking Calendar plugin versions prior to 1.1.8 Description The issue allows remote attackers to execute arbitrary SQL commands. This is related to updating the username via unspecified vectors in the cpabc appointments admin int...