CVEvulnerability
CVE-2012-5350
6.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-10-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.0 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in the Pay With Tweet plugin before 1.2 for WordPress allows remote authenticated users with certain permissions to execute arbitrary SQL commands via the id parameter in a paywithtweet shortcode.
Affected configurations
• wordpress pay-with-tweet (<= 1.1)
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/47475 Vendor Advisory
- http://wordpress.org/extend/plugins/pay-with-tweet/changelog/ wordpress.org
- http://www.exploit-db.com/exploits/18330 Exploit
- http://www.osvdb.org/78204 www.osvdb.org
- http://www.securityfocus.com/bid/51308 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72165 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/47475 Vendor Advisory
- http://wordpress.org/extend/plugins/pay-with-tweet/changelog/ wordpress.org
- http://www.exploit-db.com/exploits/18330 Exploit
- http://www.osvdb.org/78204 www.osvdb.org
- http://www.securityfocus.com/bid/51308 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72165 exchange.xforce.ibmcloud.com