Description

SQL injection vulnerability in the wp_untrash_post_comments function in wp-includes/post.php in WordPress before 4.2.4 allows remote attackers to execute arbitrary SQL commands via a comment that is mishandled after retrieval from the trash.

Remediation

References

CVE-2015-2213

Related Vulnerabilities

Oracle Application Server CVE-2009-1999 Vulnerability (CVE-2009-1999)

WordPress Plugin Backup, Restore and Migrate WordPress Sites With the XCloner Cross-Site Request Forgery (4.2.152)

WordPress Plugin Advanced Woo Search Information Disclosure (1.99)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-2578)

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Multiple Vulnerabilities (2.0.45)

Severity

High

Classification

CVE-2015-2213 CWE-138

Tags

Missing Update Known Vulnerabilities