CVE-2014-3961

SQL injection vulnerability in the Export CSV page in the Participants Database plugin before 1.5.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the query parameter in an "output CSV" action to pdb-signup/.

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

5.64% chance of exploitation in the next 30 days, 93rd percentile

Published

2014-06-04

Updated

2024-09-16

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/33613

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/33613

Security advisories

• https://wordpress.org/plugins/participants-database/changelog
• http://www.securityfocus.com/bid/67769

References

• CVE Record
• NVD entry