Wordfence Intelligence

Title	CVE ID	CVSS	Vector	Date
Community Events < 1.4 - SQL Injection	CVE-2015-3313	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	April 20, 2015
Tune Library < 1.5.5 - SQL Injection	CVE-2015-3314	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	April 20, 2015
AJAX Store Locator <= 1.2 - SQL Injection		9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	April 16, 2015
WORDPRESS VIDEO GALLERY <= 2.8 - SQL Injection		9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	April 13, 2015
cformsII < 14.6.10 - SQL Injection	CVE-2015-9333	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	April 11, 2015
All In One WP Security & Firewall <= 3.9.0 - SQL Injection	CVE-2015-9310	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	April 6, 2015
WP Business Intelligence Lite <= 1.6.2 - SQL Injection	CVE-2015-9326	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	April 1, 2015
Knews Multilingual Newsletters Plugin <= 1.7.0 - SQL Injection		9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	March 16, 2015
Pods – Custom Content Types and Fields < 2.5.1.2 - SQL Injection		9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	March 16, 2015
Import any XML or CSV File to WordPress < 3.2.5 - SQL Injection	CVE-2015-9330	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	March 12, 2015
WordPress Contact Form, Drag and Drop Form Builder Plugin – Live Forms < 3.2.0 - SQL Injection	CVE-2015-9301	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	March 11, 2015
WPML <= 3.1.9 - SQL Injection via lang Parameter	CVE-2015-2314	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	March 10, 2015
Daily Edition <= 1.6.2 - SQL Injection		9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	March 7, 2015
IP Blacklist Cloud < 3.41 - SQL Injections		9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	February 26, 2015
SpiderCalendar <= 1.4.9 - Unauthenticated SQL Injection	CVE-2015-2196	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	February 13, 2015
CP Appointment Calendar <= 1.1.5 - Unauthenticated SQL Injection	CVE-2015-10099	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	February 12, 2015
Wordpress Video Gallery <= 2.7 - SQL Injection	CVE-2015-2065	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	February 12, 2015
Store Locator < 3.34 - SQL Injection		9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	February 9, 2015
Photo Gallery by 10Web <= 1.2.7 - Unauthenticated Blind SQL Injection via order_by Parameter	CVE-2015-1055	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	January 12, 2015
Feedweb <= 3.0.7 - SQL Injection		9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	December 7, 2014

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation

Vulnerabilities protected by our SQL Injection firewall rule

Showing 401-420 of 1,444 Vulnerabilities