CVE-2015-7682 Pie Register – User Registration Forms < 2.0.19 - Authenticated SQL Injection
MediumCVSS 6.5
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in pie-register/pie-register.php in the Pie Register plugin before 2.0.19 for WordPress allow remote administrators to execute arbitrary SQL commands via the (1) select_invitaion_code_bulk_option or (2) invi_del_id parameter in the pie-invitation-codes page to wp-admin/admin.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| genetechsolutions pie register | <= 2.0.18 | No fix listed |
| wordpress pie-register(WordPress) | < 2.0.19 | 2.0.19 |
References
- packetstormsecurity.com exploit
- 20151012 CVE-2015-7682: Multiple Blind SQL Injections in Pie Register WordPress Plugin mailing-list
- github.com
- wpvulndb.com
- Wordfence Intelligence third-party-advisory
- www.cve.org