Wordfence Intelligence

Title	CVE ID	CVSS	Vector	Date
Simple Ads Manager < 2.7.97 - Multiple SQL Injections	CVE-2015-2824	10.0	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H	April 2, 2015
WP Business Intelligence Lite <= 1.6.2 - SQL Injection	CVE-2015-9326	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	April 1, 2015
Gravityforms <= 1.9.3.5 - SQL Injection	CVE-2015-2260	9.1	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H	March 17, 2015
Knews Multilingual Newsletters Plugin <= 1.7.0 - SQL Injection		9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	March 16, 2015
Pods – Custom Content Types and Fields < 2.5.1.2 - SQL Injection		9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	March 16, 2015
Responsive Slider – Image Slider – Slideshow for WordPress < 2.7.0 - Authenticated (Admin+) SQL Injection	CVE-2015-2062	7.2	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	March 12, 2015
Import any XML or CSV File to WordPress < 3.2.5 - SQL Injection	CVE-2015-9330	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	March 12, 2015
Yoast SEO <= 1.7.3.3 - Blind SQL Injection	CVE-2015-2292	8.8	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	March 11, 2015
WordPress Contact Form, Drag and Drop Form Builder Plugin – Live Forms < 3.2.0 - SQL Injection	CVE-2015-9301	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	March 11, 2015
WPML <= 3.1.9 - SQL Injection via lang Parameter	CVE-2015-2314	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	March 10, 2015
Daily Edition <= 1.6.2 - SQL Injection		9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	March 7, 2015
All In One WP Security & Firewall <= 3.8.7 - SQL Injection	CVE-2015-0894	9.0	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H	March 6, 2015
IP Blacklist Cloud < 3.41 - SQL Injections		9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	February 26, 2015
Slimstat Analytics < 3.9.6 - Unauthenticated Blind SQL Injection		8.2	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N	February 24, 2015
Gallery Bank – WordPress Photo Gallery <= 3.0.101 - SQL Injection		8.8	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	February 21, 2015
WonderPlugin Audio Player <= 2.0 - Blind SQL Injection	CVE-2015-2199	8.8	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	February 19, 2015
SpiderCalendar <= 1.4.9 - Unauthenticated SQL Injection	CVE-2015-2196	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	February 13, 2015
Wordpress Video Gallery <= 2.7 - SQL Injection	CVE-2015-2065	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	February 12, 2015
CP Appointment Calendar <= 1.1.5 - Unauthenticated SQL Injection	CVE-2015-10099	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	February 12, 2015
Store Locator < 3.34 - SQL Injection		9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	February 9, 2015

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation

Vulnerabilities protected by our SQL Injection firewall rule

Showing 1241-1260 of 1,444 Vulnerabilities