CVE-2015-0894 – SQL injection vulnerability in the All In One WP Security & Firewall plug

SQL injection vulnerability in the All In One WP Security & Firewall plugin before 3.8.8 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0894

Reference (s):

• https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/changelog/
• JVN:JVN#30832515
• URL: http://jvn.jp/en/jp/JVN30832515/index.html
• JVNDB:JVNDB-2015-000037
• URL: http://jvndb.jvn.jp/jvndb/JVNDB-2015-000037