CVE-2014-5389

ALTO 7.5CVE-2014-5389 · Published 06/10/2014 · updated 17/06/2026

In breve

CVE-2014-5389 è una vulnerabilità ALTO (CVSS 7.5) che riguarda content audit (content audit project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.3%, superiore al 83.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
content audit content_audit_project	`= 1.6= 1.6.0`	No fix yet

Description

SQL injection vulnerability in content-audit-schedule.php in the Content Audit plugin before 1.6.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the "Audited content types" option in the content-audit page to wp-admin/options-general.php.

References

packetstormsecurity.com/files/128525/WordPress-Content-Audit-1.6-Blind-SQL-Injection.html · Exploit
seclists.org/fulldisclosure/2014/Oct/8 · Exploit
securityfocus.com/bid/70214
security.dxw.com/advisories/blind-sqli-vulnerability-in-content-audit-could-allow-a-privileged-attacker-to-exfiltrate-password-hashes · Exploit
wordpress.org/plugins/content-audit/changelog

Altre vulnerabilità di content audit

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free