CVE-2011-4669

HIGH 7.5CVE-2011-4669 · Published 02/12/2011 · updated 16/06/2026

In short

CVE-2011-4669 is a HIGH (CVSS 7.5) vulnerability affecting wordpress-users (wordpress).
Chance of exploitation in the next 30 days (EPSS): 2.1%, higher than 81.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
wordpress-users wordpress	`= 0.2= 0.9= 1.0= 1.1= 1.2≤ 1.3`	No fix yet

Description

SQL injection vulnerability in wp-users.php in WordPress Users plugin 1.3 and possibly earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the uid parameter to index.php.

References

plugins.trac.wordpress.org/changeset/448261/wordpress-users · Exploit
secunia.com/advisories/46442 · Vendor Advisory
wordpress.org/extend/plugins/wordpress-users
securityfocus.com/bid/50174
exchange.xforce.ibmcloud.com/vulnerabilities/70683

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free