CVE-2014-125099 MEDIUM

CVE-2014-125099: I Recommend This Plugin dot-irecommendthis.php sql injection

Vendor N/A

Product I Recommend This Plugin

Weakness CWE-89 · SQLi

Published April 20, 2023

Last update August 6, 2024

View on NVD All CVEs

CVSS base score

6.3/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

A vulnerability has been found in I Recommend This Plugin up to 3.7.2 on WordPress and classified as critical. Affected by this vulnerability is an unknown functionality of the file dot-irecommendthis.php. The manipulation leads to sql injection. The attack can be launched remotely. Upgrading to version 3.7.3 is able to address this issue. The identifier of the patch is 058b3ef5c7577bf557557904a53ecc8599b13649. It is recommended to upgrade the affected component. The identifier VDB-226309 was assigned to this vulnerability.

Key dates

02Disclosure timeline

April 20, 2023 CVE published

August 6, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2014-125099 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html

Related vulnerabilities

Identifiers

CVE CVE-2014-125099

CWE CWE-89

CVSS 6.3 / MEDIUM

Affected versions

Vendor N/A

Product I Recommend This Plugin

Affected 3.7.0

Vendor N/A

Product I Recommend This Plugin

Affected 3.7.1

Vendor N/A

Product I Recommend This Plugin

Affected 3.7.2

CVE-2014-125099: I Recommend This Plugin dot-irecommendthis.php sql injection

01Description

02Disclosure timeline

03References

04Related CVE