Unscored CVE-2017-2195 EUVD-2017-11378GHSA-pgh8-rrxq-qpwf

SQL injection vulnerability in the Multi Feed Reader prior to version 2.2.4 allows authenticated attackers to execute arbitrary SQL command…

Published Jun 9, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: Eric Teubert Product: Multi Feed Reader

Description

SQL injection vulnerability in the Multi Feed Reader prior to version 2.2.4 allows authenticated attackers to execute arbitrary SQL commands via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Eric Teubert	Multi Feed Reader	prior to version 2.2.4	—

References

https://wordpress.org/plugins/multi-feed-reader/#developers
JVN#98617234 third-party-advisory
https://wpvulndb.com/vulnerabilities/8844