CVE-2015-10126— Easy2Map Photos Plugin sql injection
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2015-10126
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Easy2Map Photos Plugin sql injection
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability classified as critical was found in Easy2Map Photos Plugin 1.0.1 on WordPress. This vulnerability affects unknown code. The manipulation leads to sql injection. The attack can be initiated remotely. Upgrading to version 1.1.0 is able to address this issue. The patch is identified as 503d9ee2482d27c065f78d9546f076a406189908. It is recommended to upgrade the affected component. VDB-241318 is the identifier assigned to this vulnerability.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Source: NVD (National Vulnerability Database)
Vulnerability Title
WordPress Plugin Easy2Map Photos SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
WordPress和WordPress plugin都是WordPress基金会的产品。WordPress是一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。WordPress plugin是一个应用插件。 WordPress Plugin Easy2Map Photos 1.0.1版本存在SQL注入漏洞，该漏洞源于插件中存在未知代码，导致SQL注入。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | Easy2Map Photos Plugin | 1.0.1 | - |
II. Public POCs for CVE-2015-10126
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2015-10126
Please Login to view more intelligence information
Same Patch Batch · n/a · 2023-10-06 · 19 CVEs total
| CVE-2023-45303 | 8.4 HIGH | ThingsBoard 注入漏洞 |
| CVE-2023-26153 | 8.3 HIGH | Geokit Rails 代码问题漏洞 |
| CVE-2023-5366 | 7.1 HIGH | Openvswitch don't match packets on nd_target field |
| CVE-2023-44766 | PortlandLabs Concrete CMS 跨站脚本漏洞 | |
| CVE-2023-44765 | PortlandLabs Concrete CMS 跨站脚本漏洞 | |
| CVE-2023-44764 | PortlandLabs Concrete CMS 跨站脚本漏洞 | |
| CVE-2023-44762 | PortlandLabs Concrete CMS 跨站脚本漏洞 | |
| CVE-2023-44761 | PortlandLabs Concrete CMS 跨站脚本漏洞 | |
| CVE-2023-44807 | D-Link DIR-820L 缓冲区错误漏洞 | |
| CVE-2023-44770 | Zenario CMS 跨站脚本漏洞 | |
| CVE-2023-45282 | NASA Open MCT 安全漏洞 | |
| CVE-2023-45311 | fsevents 代码注入漏洞 | |
| CVE-2023-44860 | NETIS SYSTEMS N3 安全漏洞 | |
| CVE-2023-44061 | Simple and Nice Shopping Cart Script 代码问题漏洞 | |
| CVE-2023-45322 | libxml2 资源管理错误漏洞 | |
| CVE-2023-36123 | Plain Craft Launcher 路径遍历漏洞 | |
| CVE-2023-44771 | Zenario CMS 跨站脚本漏洞 | |
| CVE-2023-44758 | GDidees CMS 跨站脚本漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-6667
PgBouncer missing authorization check in KILL_CLIENT admin c - CVE-2026-6666
PgBouncer crash in kill_pool_logins_server_error - CVE-2026-6665
PgBouncer buffer overflow in SCRAM - CVE-2026-6664
PgBouncer integer overflow in PgBouncer network packet parsi - CVE-2026-8127
eladmin Users API Endpoint UserController.java checkLevel ac
Same weakness: CWE-89
- CVE-2026-8207
Gibbon <v30.0.01 认证SQL注入漏洞 - CVE-2026-42287
Emlog: SQL Injection Vulnerability in log_model.php within a - CVE-2026-41889
pgx: SQL Injection via placeholder confusion with dollar quo - CVE-2026-41496
PraisonAI: SQL Injection via unvalidated `table_prefix` in 9 - CVE-2026-42208
LiteLLM: SQL injection in Proxy API key verification
V. Comments for CVE-2015-10126
No comments yet