CVE-2010-4839
HIGH
7.5
CVSS 2.0
Description
SQL injection vulnerability in the Event Registration plugin 5.32 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the event_id parameter in a register action.
Affected products and versions
- n/a n/a — Versions not specified
References
- secunia.com http://secunia.com/advisories/42265 Vendor Advisory
- www.exploit-db.com http://www.exploit-db.com/exploits/15513 Exploit
- nvd.nist.gov Official NVD record