Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in WP Multiple Meta Box 1.0.0

  • Severity: high-risk
  • Status: Open
  • Publication: August 4, 2016

The WP Multiple Meta Box plugin for WordPress is vulnerable to a type of attack called “blind SQL Injection”. This type of attack can be used by authenticated attackers to obtain sensitive information from the database, such as passwords and usernames. This vulnerability exists in versions up to and including 1.0.0 due to insufficient escaping of user-supplied parameters and a lack of preparation on existing SQL queries.

Detected in:

WP Multiple Meta Box open vulnerable versions: >= * <= 1.0.0

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.