InfiniteWP Admin Panel vulnerabilities

3 known CVE vulnerabilities in InfiniteWP Admin Panel, translated and rated.

CVE-2014-9521High
An unrestricted file upload vulnerability exists in the InfiniteWP Admin Panel before version 2.4.4 in uploadScript.php. This allows remote attackers to execute arbitrary code by uploading a file with a double extension.
CVE-2014-9520High
SQL injection vulnerability in the InfiniteWP Admin Panel before version 2.4.4 in execute.php allows remote attackers to execute arbitrary SQL commands via the historyID parameter.
CVE-2014-9519High
An SQL injection vulnerability in the InfiniteWP Admin Panel before version 2.4.3 in login.php allows remote attackers to execute arbitrary SQL commands via the email parameter.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS