Wordpress Simple Shout Box Vulnerabilities

Update the plugin. Ashiyane Digital Security Team discovered and reported this SQL Injection vulnerability in WordPress Simple ShoutBox Plugin. This could allow a malicious actor to directly interact with your database, including but not limited to stealing information. This vulnerability has been fixed in version 1.1.

Affected:

up to 1.1

Fixed in:

1.1

Disclosed:

May 15, 2023

Because of this vulnerability, remote authenticated users can execute arbitrary SQL commands. Update the plugin.

Affected:

up to 1.1

Fixed in:

1.1

Disclosed:

May 15, 2015

The WordPress Shout Box Widget plugin is vulnerable to generic SQL Injection via the 'class_qshout.php' file in versions up to, and including, 2.0.2 due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attac...

CVSS:

9.8

Affected:

up to 2.0.2

Fix:

No patched version reported

Disclosed:

Jan 31, 2013

The WordPress Shout Box Widget plugin is vulnerable to generic SQL Injection via the 'class_qshout.php' file in versions up to, and including, 2.0.2 due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attac...

Affected:

up to 2.0.2

Fix:

No patched version reported

Disclosed:

Jan 31, 2013

The wordpress-simple-shout-box WordPress plugin was affected by a SQL Injection security vulnerability.

Affected:

up to 2.0.2

Fix:

No patched version reported