CVE-2014-2839
NONE EPSS 73.4%
Published Jan 12, 201511y ago · Modified Jun 17, 20262w ago
Published Jan 12, 2015 11y ago
Last Modified Jun 17, 2026 2w ago
Description
SQL injection vulnerability in the GD Star Rating plugin 19.22 for WordPress allows remote administrators to execute arbitrary SQL commands via the s parameter in the gd-star-rating-stats page to wp-admin/admin.php.
Threat Intelligence
EPSS Exploit Probability
73.4% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-89 SQL Injection Injection
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| dev4press | gd_star_rating | 19.22 | any |
References 3
- seclists.org http://seclists.org/fulldisclosure/2014/Mar/399
- advisories.dxw.com https://advisories.dxw.com/advisories/csrf-and-blind-sql-injection-in-gd-star-rating-1-9-22/
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/92156
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.