CVE-2015-7682

NONE EPSS 68.8%

Published Oct 16, 201510y ago · Modified Jun 17, 20262w ago

Published Oct 16, 2015 10y ago

Last Modified Jun 17, 2026 2w ago

Description

Multiple SQL injection vulnerabilities in pie-register/pie-register.php in the Pie Register plugin before 2.0.19 for WordPress allow remote administrators to execute arbitrary SQL commands via the (1) select_invitaion_code_bulk_option or (2) invi_del_id parameter in the pie-invitation-codes page to wp-admin/admin.php.

Threat Intelligence

EPSS Exploit Probability

68.8% percentile

Exploit & Patch Status

Public Exploit Known

No Patch Available

Weaknesses 1

CWE-89 SQL Injection Injection

Affected Products 1

Vendor	Product	Version	Range
genetechsolutions	pie_register	*	≤2.0.18

References 4

packetstormsecurity.com http://packetstormsecurity.com/files/133929/WordPress-Pie-Register-2.0.18-SQL-Injection.html

Exploit
securityfocus.com http://www.securityfocus.com/archive/1/536669/100/0/threaded
github.com https://github.com/GTSolutions/Pie-Register/blob/2.0.19/readme.txt
wpvulndb.com https://wpvulndb.com/vulnerabilities/8213

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.