Unscored severity · published Dec 2, 2011
CVE-2011-4669
SQL injection vulnerability in wp-users.php in WordPress Users plugin 1.3 and possibly earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the uid…
–
CVSS
2.1%
EPSS
No
On KEV
Description
SQL injection vulnerability in wp-users.php in WordPress Users plugin 1.3 and possibly earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the uid parameter to index.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WO
Wordpress-users · Wordpress
through 1.3; 0.2; 0.9; 1.0; 1.1; 1.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-4669
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-4669
Exploit
http://plugins.trac.wordpress.org/changeset/448261/wordpress-users
Vendor Advisory
http://secunia.com/advisories/46442
wordpress.org
http://wordpress.org/extend/plugins/wordpress-users/
www.securityfocus.com
http://www.securityfocus.com/bid/50174
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/70683