| Package | Affected versions | Patched versions |
|---|---|---|
| mingle-forum | = 1.0.00= 1.0.01= 1.0.02= 1.0.03= 1.0.04= 1.0.05= 1.0.06= 1.0.07= 1.0.08= 1.0.09= 1.0.10= 1.0.11= 1.0.12= 1.0.13= 1.0.14= 1.0.15= 1.0.16= 1.0.17= 1.0.18= 1.0.19= 1.0.20= 1.0.21= 1.0.21.1= 1.0.22= 1.0.23= 1.0.23.1= 1.0.23.2= 1.0.24= 1.0.25= 1.0.26= 1.0.27= 1.0.28= 1.0.28.1= 1.0.28.2= 1.0.29= 1.0.30= 1.0.31= 1.0.31.1= 1.0.31.2= 1.0.31.3= 1.0.31.4= 1.0.32≤ 1.0.32.1 |
Multiple SQL injection vulnerabilities in fs-admin/fs-admin.php in the Mingle Forum plugin 1.0.32.1 and other versions before 1.0.33 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) delete_usrgrp[] parameter in a delete_usergroups action, (2) usergroup parameter in an add_user_togroup action, or (3) add_forum_group_id parameter in an add_forum_submit action.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free