| Package | Affected versions | Patched versions |
|---|---|---|
| mingle-forum | = 1.0.00= 1.0.01= 1.0.02= 1.0.03= 1.0.04= 1.0.05= 1.0.06= 1.0.07= 1.0.08= 1.0.09= 1.0.10= 1.0.11= 1.0.12= 1.0.13= 1.0.14= 1.0.15= 1.0.16= 1.0.17= 1.0.18= 1.0.19= 1.0.20= 1.0.21= 1.0.21.1= 1.0.22= 1.0.23= 1.0.23.1= 1.0.23.2= 1.0.24= 1.0.25= 1.0.26= 1.0.27= 1.0.28= 1.0.28.1= 1.0.28.2= 1.0.29= 1.0.30= 1.0.31= 1.0.31.1= 1.0.31.2= 1.0.31.3= 1.0.31.4= 1.0.32= 1.0.32.1≤ 1.0.33 |
Multiple SQL injection vulnerabilities in wpf.class.php in the Mingle Forum plugin before 1.0.34 for WordPress allow remote attackers to execute arbitrary SQL commands via the id parameter in a viewtopic (1) remove_post, (2) sticky, or (3) closed action or (4) thread parameter in a postreply action to index.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free