Security Advisory

CVE-2015-2213

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-11-09 11:00:00

Last updated 2024-08-06 05:10:15

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

SQL injection vulnerability in the wp_untrash_post_comments function in wp-includes/post.php in WordPress before 4.2.4 allows remote attackers to execute arbitrary SQL commands via a comment that is mishandled after retrieval from the trash.

← Browse all CVEs View on cve.org ↗