SQL Injection Vulnerabilities in Yawpp Plugin for WordPress
CVE-2014-5182

Currently unrated

Key Information:

Vendor: Wordpress
Status: YaWPp
Vendor: CVE Published:; 6 August 2014

What is CVE-2014-5182?

The Yawpp plugin (version 1.2) for WordPress is susceptible to multiple SQL injection vulnerabilities, allowing remote authenticated users with Contributor privileges to execute arbitrary SQL commands. These vulnerabilities are related to components within the files admin_functions.php and admin_update.php. Affected users can exploit this flaw through specific parameters, notably the 'id' parameter during the update action to wp-admin/admin.php, potentially compromising the system's integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch