SQL Injection Vulnerability in NewStatPress Plugin for WordPress
CVE-2015-4062

Currently unrated

Key Information:

Vendor

Wordpress
Status
Newstatpress
Vendor
CVE Published:
27 May 2015

Badges

👾 Exploit Exists🟣 EPSS 10%

What is CVE-2015-4062?

An SQL injection vulnerability exists in the NewStatPress plugin for WordPress, specifically in the includes/nsp_search.php file. This flaw allows remote authenticated users to execute arbitrary SQL commands by manipulating the 'where1' parameter on the nsp_search page. Proper validation and sanitization of user input are crucial to prevent unauthorized database access and potential data exposure.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://packetstormsecurity.com/files/132038/WordPress-New...
x_refsource_MISC
https://wordpress.org/plugins/newstatpress/changelog/
x_refsource_CONFIRM
http://www.securityfocus.com/bid/74773
vdb-entryx_refsource_BID

EPSS Score

10% chance of being exploited in the next 30 days.

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

JSON
.