CVE-2014-3937: SQL Injection
Published Jun 2, 2014
·Updated
SQL injection vulnerability in the Contextual Related Posts plugin before 1.8.10.2 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
37 affected components
Ajaydsouza Contextual Related Posts Wordpress<=1.8.10.1
Ajaydsouza Contextual Related Posts Wordpress=1.0
Ajaydsouza Contextual Related Posts Wordpress=1.1
Ajaydsouza Contextual Related Posts Wordpress=1.1.1
Ajaydsouza Contextual Related Posts Wordpress=1.2
Ajaydsouza Contextual Related Posts Wordpress=1.2.1
Ajaydsouza Contextual Related Posts Wordpress=1.2.2
Ajaydsouza Contextual Related Posts Wordpress=1.3
Ajaydsouza Contextual Related Posts Wordpress=1.3.1
Ajaydsouza Contextual Related Posts Wordpress=1.4
Ajaydsouza Contextual Related Posts Wordpress=1.4.1
Ajaydsouza Contextual Related Posts Wordpress=1.4.2
Ajaydsouza Contextual Related Posts Wordpress=1.5
Ajaydsouza Contextual Related Posts Wordpress=1.5.1
Ajaydsouza Contextual Related Posts Wordpress=1.5.2
Ajaydsouza Contextual Related Posts Wordpress=1.6
Ajaydsouza Contextual Related Posts Wordpress=1.6.1
Ajaydsouza Contextual Related Posts Wordpress=1.6.2
Ajaydsouza Contextual Related Posts Wordpress=1.6.3
Ajaydsouza Contextual Related Posts Wordpress=1.6.4
Ajaydsouza Contextual Related Posts Wordpress=1.6.5
Ajaydsouza Contextual Related Posts Wordpress=1.7
Ajaydsouza Contextual Related Posts Wordpress=1.7.1
Ajaydsouza Contextual Related Posts Wordpress=1.7.2
Ajaydsouza Contextual Related Posts Wordpress=1.7.3
Ajaydsouza Contextual Related Posts Wordpress=1.8
Ajaydsouza Contextual Related Posts Wordpress=1.8.1
Ajaydsouza Contextual Related Posts Wordpress=1.8.2
Ajaydsouza Contextual Related Posts Wordpress=1.8.3
Ajaydsouza Contextual Related Posts Wordpress=1.8.4
Ajaydsouza Contextual Related Posts Wordpress=1.8.5
Ajaydsouza Contextual Related Posts Wordpress=1.8.6
Ajaydsouza Contextual Related Posts Wordpress=1.8.7
Ajaydsouza Contextual Related Posts Wordpress=1.8.8
Ajaydsouza Contextual Related Posts Wordpress=1.8.9
Ajaydsouza Contextual Related Posts Wordpress=1.8.9.1
Ajaydsouza Contextual Related Posts Wordpress=1.8.10
Remediation
Event History
Jun 2, 2014
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
via NVD·03:55 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-3937?
CVE-2014-3937 is considered to have a moderate severity level due to its potential to allow remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2014-3937?
To fix CVE-2014-3937, users should upgrade the Contextual Related Posts plugin to version 1.8.10.2 or later.
3
What versions of the Contextual Related Posts plugin are affected by CVE-2014-3937?
CVE-2014-3937 affects all versions of the Contextual Related Posts plugin prior to 1.8.10.2.
4
Can CVE-2014-3937 lead to data breaches?
Yes, CVE-2014-3937 can potentially lead to data breaches as it allows attackers to execute arbitrary SQL commands.
5
Is there any workaround for CVE-2014-3937?
There are no known workarounds for CVE-2014-3937 other than upgrading the plugin to a patched version.