PT-2023-10167 · WordPress · I Recommend This Plugin

Oskar Adin · Published 2023-04-20 · Updated 2024-05-17 · CVE-2014-125099

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions I Recommend This Plugin versions up to 3.7.2

Description A critical vulnerability has been found in the I Recommend This Plugin on WordPress, affecting an unknown functionality of the file dot-irecommendthis.php. The manipulation leads to sql injection, and the attack can be launched remotely.

Recommendations For versions up to 3.7.2, upgrade to version 3.7.3 to address this issue.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2014-125099

Affected Products

I Recommend This Plugin

References · 8

• https://github.com/wp-plugins/i-recommend-this/releases/tag/3.7.3 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2014-125099 · Security Note
• https://github.com/wp-plugins/i-recommend-this/commit/058b3ef5c7577bf557557904a53ecc8599b13649 · Patch
• https://t.me/cibsecurity/62502 · Telegram Post
• https://vuldb.com/?ctiid.226309 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-125099 · Note
• https://vuldb.com/?id.226309 · Note
• https://t.me/cvenotify/49399 · Telegram Post