plugin

Simple Forum Vulnerabilities

5 known security issues reported for the Simple Forum WordPress plugin. Most recent disclosed Aug 1, 2014.

1 critical

Running Simple Forum on your site? Check whether your installed version is affected.

Scan your site free

Simple Forum [simple-forum] < 1.1

unknown

This plugin is prone to a remote file upload vulnerability. Update the plugin.

Affected:
up to 1.1
Fixed in:
1.1
Disclosed:
Aug 1, 2014

Simple Forum [simple-forum] < 1.1

unknown

WordPressSimple:Press Forum plugin is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary files to the affected computer. Update the plugin.

Affected:
up to 1.1
Fixed in:
1.1
Disclosed:
Aug 28, 2012

Simple Forum [simple-forum] <= 1.11 (unfixed + closed)

unknown

[en] SQL injection vulnerability in ahah/sf-profile.php in the Yellow Swordfish Simple Forum module for Wordpress allows remote attackers to execute arbitrary SQL commands via the u parameter. NOTE: this issue was disclosed by an unreliable researcher, so the details might be incorrect.

Affected:
up to 1.11
Fix:
No patched version reported
Disclosed:
Aug 24, 2009

CVE-2008-7040 on NVD →

Yellow Swordfish Simple Forum <= 1.11 - SQL Injection

critical

SQL injection vulnerability in ahah/sf-profile.php in the Yellow Swordfish Simple Forum module for Wordpress allows remote attackers to execute arbitrary SQL commands via the u parameter. NOTE: this issue was disclosed by an unreliable researcher, so the details might be incorrect.

CVSS:
9.8
Affected:
up to 1.11
Fix:
No patched version reported
Disclosed:
Feb 16, 2008

CVE-2008-7040 on NVD →

Simple Forum [simple-forum] < 100 (unfixed + closed)

unknown

The simple-forum WordPress plugin was affected by a File Upload security vulnerability.

Affected:
up to 100
Fix:
No patched version reported

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database