Security Advisory
CVE-2015-7319
7.5
Vulnerability Description
SQL injection vulnerability in cpabc_appointments_admin_int_calendar_list.inc.php in the Appointment Booking Calendar plugin before 1.1.8 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to updating the username.
Published Date
September 29, 2015
Official Source
NIST NVD Advisory