Vulnerability Details CVE-2015-0894
SQL injection vulnerability in the All In One WP Security & Firewall plugin before 3.8.8 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 70.5%
CVSS Severity
CVSS v2 Score 6.0
References
- http://jvn.jp/en/jp/JVN30832515/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2015-000037
- https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/changelog/
- http://jvn.jp/en/jp/JVN30832515/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2015-000037
- https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/changelog/
Products affected by CVE-2015-0894
-
cpe:2.3:a:tips_and_tricks_hq:all_in_one_wordpress_security_and_firewall:3.8.2
-
cpe:2.3:a:tips_and_tricks_hq:all_in_one_wordpress_security_and_firewall:3.8.7