CVE-2014-9175: SQL Injection
SQL injection vulnerability in wpdatatables.php in the wpDataTables plugin 1.5.3 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the tableid parameter in a getwdtable action to wp-admin/admin-ajax.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-9175?
CVE-2014-9175 is considered a high-severity SQL injection vulnerability that allows attackers to execute arbitrary SQL commands.
How do I fix CVE-2014-9175?
To fix CVE-2014-9175, update the wpDataTables plugin to a version higher than 1.5.3.
Where is CVE-2014-9175 found?
CVE-2014-9175 is found in the wpdatatables.php file of the wpDataTables plugin version 1.5.3 and earlier.
What type of vulnerability is CVE-2014-9175?
CVE-2014-9175 is a SQL injection vulnerability that can allow remote attackers to manipulate database queries.
Who is affected by CVE-2014-9175?
WordPress sites using the wpDataTables plugin version 1.5.3 and earlier are affected by CVE-2014-9175.