CVE-2012-5350

SQL injection vulnerability in the Pay With Tweet plugin before 1.2 for WordPress allows remote authenticated users with certain permissions to execute arbitrary SQL commands via the id parameter in a paywithtweet shortcode.

CVSS v2.0

6.0 MEDIUMAV:N/AC:M/Au:S/C:P/I:P/A:P

EPSS

2.37% chance of exploitation in the next 30 days, 83th percentile

Published

2012-10-09

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/18330

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/18330

References

• CVE Record
• NVD entry

Related

• CVE-2012-5349
• CVE-2012-5357
• CVE-2012-5348
• CVE-2012-5367
• CVE-2012-5347
• CVE-2012-5375