Security Advisory
CVE-2014-4944
6.5
Vulnerability Description
Multiple SQL injection vulnerabilities in inc/bsk-pdf-dashboard.php in the BSK PDF Manager plugin 1.3.2 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) categoryid or (2) pdfid parameter to wp-admin/admin.php.
Published Date
July 14, 2014
Official Source
NIST NVD Advisory