CVE-2015-9457 Pretty Links – Link Management, Branding, Tracking & Sharing Plugin <= 1.6.7 - SQL Injection
HighCVSS 7.2
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The pretty-link plugin before 1.6.8 for WordPress has PrliLinksController::list_links SQL injection via the group parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| caseproof prettylinks | < 1.6.8 | 1.6.8 |
| wordpress pretty-link(WordPress) | < 1.6.8 | 1.6.8 |
References
- cinu.pl exploit third-party-advisory
- wordpress.org release-notes
- wpvulndb.com third-party-advisory
- Wordfence Intelligence third-party-advisory
- www.cve.org