Description
SQL injection vulnerability in login.php in InfiniteWP Admin Panel before 2.4.3 allows remote attackers to execute arbitrary SQL commands via the email parameter.
References (2)
Core 2
Core References
Various Sources x_refsource_misc
https://lifeforms.nl/20141210/infinitewp-vulnerabilities/
Mailing List mailing-list
x_refsource_fulldisc
http://seclists.org/fulldisclosure/2014/Dec/43
Scores
EPSS
0.0116
EPSS Percentile
64.0%
Details
CWE
CWE-89
Status
published
Products (1)
infinitewp/infinitewp
< 2.4.2
Published
Jan 05, 2015
Tracked Since
Feb 18, 2026