WordPress CVEs

Description

SQL injection vulnerability in view.php in the Google Doc Embedder plugin before 2.5.15 for WordPress allows remote attackers to execute arbitrary SQL commands via the gpid parameter.

Affected WordPress components

• google-document-embedder Plugin · google-document-embedder
  Confirmed match Homeless
  Versions not specified
  View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

• n/a n/a — Versions not specified
• google_doc_embedder_project google_doc_embedder — Up to and including 2.5.14

References

• osvdb.org http://osvdb.org/show/osvdb/115044
• security.szurek.pl http://security.szurek.pl/google-doc-embedder-2514-sql-injection.html Exploit
• www.exploit-db.com http://www.exploit-db.com/exploits/35371 Exploit
• exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/98944
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/changeset/1023572/google-document-embedder Exploit
• nvd.nist.gov Official NVD record