CVE-2007-10003

ÉLEVÉE 8.8CVE-2007-10003 · Published 29/10/2023 · updated 16/06/2026

En bref

CVE-2007-10003 est une vulnérabilité ÉLEVÉE (CVSS 8.8) touchant the hackers diet (wp-plugins).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.71%, plus élevée que 53.9% des vulnérabilités.
Correctif : mettre à jour vers 0.9.7b ou plus récent.

Package	Affected versions	Patched versions
the hackers diet wp-plugins	`< 0.9.7b`	`0.9.7b`

Description

A vulnerability, which was classified as critical, has been found in The Hackers Diet Plugin up to 0.9.6b on WordPress. This issue affects some unknown processing of the file ajax_blurb.php of the component HTTP POST Request Handler. The manipulation of the argument user leads to sql injection. The attack may be initiated remotely. Upgrading to version 0.9.7b is able to address this issue. The patch is named 7dd8acf7cd8442609840037121074425d363b694. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-243803.

References

wp-plugins/the-hackers-diet commit 7dd8acf · Patch
wp-plugins/the-hackers-diet release 0.9.7b · Release Notes
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free