CVE-2015-3313

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

SQL injection vulnerability in WordPress Community Events plugin before 1.4.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/131530/WordPress-Community-Events-1.3.5-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
http://www.openwall.com/lists/oss-security/2015/04/16/10Mailing List
http://www.openwall.com/lists/oss-security/2015/05/08/3Mailing List
http://www.securityfocus.com/bid/74234Third Party Advisory, VDB Entry
https://wordpress.org/plugins/community-events/#developersThird Party Advisory
https://www.exploit-db.com/exploits/36805/Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/131530/WordPress-Community-Events-1.3.5-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
http://www.openwall.com/lists/oss-security/2015/04/16/10Mailing List
http://www.openwall.com/lists/oss-security/2015/05/08/3Mailing List
http://www.securityfocus.com/bid/74234Third Party Advisory, VDB Entry
https://wordpress.org/plugins/community-events/#developersThird Party Advisory
https://www.exploit-db.com/exploits/36805/Third Party Advisory, VDB Entry

Timeline

Published: Sep 7, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-33148.1SQL injection vulnerability in WordPress Tune Library plugin before 1.5.5.CVE-2015-33157.8Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files CVE-2015-33164.6CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2;CVE-2015-33174.6CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2;CVE-2015-33184.6CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2;CVE-2015-33195.0Hotspot Express hotEx Billing Manager 73 does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attacke CVE-2015-33202.1Lenovo USB Enhanced Performance Keyboard software before 2.0.2.2 includes active debugging code in SKHOOKS.DLL, which allows local users to CVE-2015-33216.7Services and files in Lenovo Fingerprint Manager before 8.01.42 have incorrect ACLs, which allows local users to invalidate local checks and CVE-2015-33225.0Lenovo ThinkServer RD350, RD450, RD550, RD650, and TD350 servers before 1.26.0 use weak encryption to store (1) user and (2) administrator B CVE-2015-33235.0The ThinkServer System Manager (TSM) Baseboard Management Controller before firmware 1.27.73476 for ThinkServer RD350, RD450, RD550, RD650, CVE-2015-33244.3The ThinkServer System Manager (TSM) Baseboard Management Controller before firmware 1.27.73476 for ThinkServer RD350, RD450, RD550, RD650, CVE-2015-33257.5SQL injection vulnerability in forum.php in the WP Symposium plugin before 15.4 for WordPress allows remote attackers to execute arbitrary S