What’s Vulnerable › Vulnerabilities

CVE-2014-5183

• Severity: medium (CVSS 6.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2014-08-06 · updated 2026-06-17
• Weakness: CWE-89

Description

SQL injection vulnerability in includes/mode-edit.php in the Simple Retail Menus (simple-retail-menus) plugin before 4.1 for WordPress allows remote authenticated editors to execute arbitrary SQL commands via the targetmenu parameter in an edit action to wp-admin/admin.php.

Affected products

• Simple Retail Menus Plugin Project Simple-Retail-Menus: through 4.0.1; 4.0

References

• http://codevigilant.com/disclosure/wp-plugin-simple-retail-menus-a1-injection
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=861170%40simple-retail-menus&old=728969%40simple-retail-menus&sfp_email=&sfph_mail=#file1
• http://codevigilant.com/disclosure/wp-plugin-simple-retail-menus-a1-injection
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=861170%40simple-retail-menus&old=728969%40simple-retail-menus&sfp_email=&sfph_mail=#file1

Get alerted when CVE-2014-5183 or the next vulnerability affects your stack