WordPress CVEs

Description

Vulnerability in wordpress plugin DTracker v1.5, In file ./dtracker/delete.php user input isn't sanitized via the contact_id variable before adding it to the end of an SQL query.

Affected WordPress components

• dtracker Plugin · dtracker
  Confirmed match Homeless
  From unspecified (including) to 1.5 (excluding); Version 1.5
  View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

• ITFlux DTracker — From unspecified (including) to 1.5 (excluding)
• dtracker_project dtracker — Version 1.5

References

• www.securityfocus.com http://www.securityfocus.com/bid/96781 Third Party Advisory, VDB Entry
• www.vapidlabs.com http://www.vapidlabs.com/advisory.php?v=183 Exploit
• wordpress.org https://wordpress.org/plugins/dtracker/ Third Party Advisory
• nvd.nist.gov Official NVD record