CVE-2015-7682: SQL Injection
Multiple SQL injection vulnerabilities in pie-register/pie-register.php in the Pie Register plugin before 2.0.19 for WordPress allow remote administrators to execute arbitrary SQL commands via the (1) selectinvitaioncodebulkoption or (2) invidelid parameter in the pie-invitation-codes page to wp-admin/admin.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7682?
CVE-2015-7682 is classified as a high severity vulnerability due to the ability for remote administrators to execute arbitrary SQL commands.
How do I fix CVE-2015-7682?
To fix CVE-2015-7682, upgrade the Pie Register plugin to version 2.0.19 or later.
What are the affected plugins for CVE-2015-7682?
CVE-2015-7682 affects the Pie Register plugin versions prior to 2.0.19 for WordPress.
What SQL injection parameters are involved in CVE-2015-7682?
CVE-2015-7682 involves SQL injection vulnerabilities through the 'select_invitaion_code_bulk_option' and 'invi_del_id' parameters.
Who can exploit CVE-2015-7682?
CVE-2015-7682 can be exploited by remote administrators of the affected Pie Register plugin.