CVE-2015-2824
HighSummary
The Simple Ads Manager plugin before version 2.7.97 for WordPress contains multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands.
Risk Assessment
Attackers can exploit these vulnerabilities to gain unauthorized access to the database, potentially leading to data theft or system compromise.
Recommendation
It is recommended to update the Simple Ads Manager plugin to the latest version to mitigate these vulnerabilities and conduct a security audit of the database.
Other vulnerabilities in Simple Ads Manager plugin for WordPress
Original NVD description (English source)
Multiple SQL injection vulnerabilities in the Simple Ads Manager plugin before 2.7.97 for WordPress allow remote attackers to execute arbitrary SQL commands via a (1) hits[][] parameter in a sam_hits action to sam-ajax.php; the (2) cstr parameter in a load_posts action to sam-ajax-admin.php; the (3) searchTerm parameter in a load_combo_data action to sam-ajax-admin.php; or the (4) subscriber, (5) contributor, (6) author, (7) editor, (8) admin, or (9) sadmin parameter in a load_users action to sam-ajax-admin.php.