EUVD-2016-1930

Malware in sbrugna...

WordPress xtremelocator plugin SQL injection vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in version 1.5 of the WordPress xtremelocator plugin. The vulnerability...

CVE-2016-10939

The CVE-2016-10939 entry concerns the WordPress xtremelocator plugin version 1.5, which is vulnerable to SQL injection via the id parameter. According to the NVD entry, the vulnerability affects the plugin and enables potential SQL command execution with network access; CVSS 2.0 base score 6.5 (M...