CVE Catalog

CVE-2015-1000011

Critical
Published: Translated: NVD NIST

Summary

The WordPress plugin Dukapress version 2.5.9 contains a blind SQL injection vulnerability, which may allow attackers to execute unauthorized queries against the database.

Risk Assessment

Exploitation of this vulnerability could lead to the disclosure of sensitive data or database compromise, posing a significant threat to organizational security.

Recommendation

It is recommended to update the Dukapress plugin to the latest version to mitigate this vulnerability and conduct a security audit of the application.

Original NVD description (English source)

Blind SQL Injection in wordpress plugin dukapress v2.5.9

Vulnerability data from NVD (NIST) · CISA KEV · EPSS