CVE-2008-0845

Wordpress Dean Logan Wp-people Plugin - SQL Injection

Title source: rule

Description

SQL injection vulnerability in wp-people-popup.php in Dean Logan WP-People plugin 1.6.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the person parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by S@BUN · textwebappsphp
https://www.exploit-db.com/exploits/31230

References (4)

Scores

EPSS 0.0038
EPSS Percentile 58.9%

Classification

CWE
CWE-89
Status draft

Affected Products (1)

wordpress/dean_logan_wp-people_plugin

Timeline

Published Feb 20, 2008
Tracked Since Feb 18, 2026