CVE-2012-5350

MEDIUM 6.0 CVSS 2.0

Published: October 9, 2012
Last modified: June 16, 2026
NVD status: Modified
Reported by: cve@mitre.org
Weakness: CWE-89
CVSS vector: AV:N/AC:M/Au:S/C:P/I:P/A:P

Description

SQL injection vulnerability in the Pay With Tweet plugin before 1.2 for WordPress allows remote authenticated users with certain permissions to execute arbitrary SQL commands via the id parameter in a paywithtweet shortcode.

Affected products and versions

n/a n/a — Versions not specified

References

secunia.com http://secunia.com/advisories/47475 Vendor Advisory
wordpress.org http://wordpress.org/extend/plugins/pay-with-tweet/changelog/
www.exploit-db.com http://www.exploit-db.com/exploits/18330 Exploit
www.osvdb.org http://www.osvdb.org/78204
www.securityfocus.com http://www.securityfocus.com/bid/51308 Exploit
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/72165
nvd.nist.gov Official NVD record

WordPress CVEs

Description

Affected products and versions

References