SQL Injection Vulnerability in Google Doc Embedder Plugin for WordPress
CVE-2014-9173

Currently unrated

Key Information:

Vendor: Wordpress
Status: Google Doc Embedder
Vendor: CVE Published:; 2 December 2014

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2014-9173?

The Google Doc Embedder plugin for WordPress prior to version 2.5.15 is susceptible to a SQL injection vulnerability. This issue arises from improper validation of user inputs in the view.php file, specifically the gpid parameter. As a result, remote attackers can inject arbitrary SQL commands, potentially compromising the security of the database and the integrity of the WordPress site. This vulnerability underscores the need for immediate updates to safeguard against unauthorized database access and exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2014-9173 - Proof of Concept