CVE-2013-6243

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2013-10-23 · updated 2026-06-17
Weakness: CWE-89

Description

SQL injection vulnerability in the Landing Pages plugin 1.2.3, before 20131009, and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the "post" parameter to index.php.

Affected products

Landing Pages Project Landing Pages Plugin: through 1.2.3; 1.0.3.7, 1.0.3.8, 1.0.3.9, 1.0.4.1, 1.0.4.2, 1.0.4.4 (+20)

References

http://osvdb.org/98334
http://plugins.trac.wordpress.org/changeset?reponame=&old=785535%40landing-pages&new=785535%40landing-pages
http://secunia.com/advisories/55192
http://wordpress.org/plugins/landing-pages/changelog
http://www.securityfocus.com/bid/62942
https://exchange.xforce.ibmcloud.com/vulnerabilities/87803
http://osvdb.org/98334
http://plugins.trac.wordpress.org/changeset?reponame=&old=785535%40landing-pages&new=785535%40landing-pages
http://secunia.com/advisories/55192
http://wordpress.org/plugins/landing-pages/changelog
http://www.securityfocus.com/bid/62942
https://exchange.xforce.ibmcloud.com/vulnerabilities/87803

Get alerted when CVE-2013-6243 or the next vulnerability affects your stack