Back to CVE Browser

CVE-2014-10013

HIGH

7.5

CVSS Severity Score

EPSS Score0.1600%

EPSS Percentile23.94th

PublishedJan 13, 2015

Last ModifiedMay 6, 2026

Vulnerability Description

SQL injection vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the keywordphrase parameter in a dosearch action.

Affected Platforms (CPE)

📦

Strategy11

Awp Classifieds

= 3.3.1

References & Advisories

🔗 http://packetstormsecurity.com/files/129035/Another-WordPress-Classifieds-Cross-Site-Scripting-SQL-Injection.html

🔗 http://www.exploit-db.com/exploits/35204

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/98589

🔗 http://packetstormsecurity.com/files/129035/Another-WordPress-Classifieds-Cross-Site-Scripting-SQL-Injection.html

🔗 http://www.exploit-db.com/exploits/35204

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/98589

Related Vulnerabilities

CVE-2026-395337.5

Unauthenticated Broken Access Control in AWP Classifieds <= 4.4.4 versions.

CVE-2014-052310.0

Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow attackers to execute arbitrary code...

CVE-2014-049810.0

Stack-based buffer overflow in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Ma...

CVE-2014-052410.0

Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow attackers to execute arbitrary code...