CVE-2012-2109

SQL injection vulnerability in wp-load.php in the BuddyPress plugin 1.5.x before 1.5.5 of WordPress allows remote attackers to execute arbitrary SQL commands via the page parameter in an activity_widget_filter action.

• CWE-89

• http://buddypress.org/2012/03/buddypress-1-5-5/Patch, Vendor Advisory
• http://osvdb.org/80763
• http://seclists.org/bugtraq/2012/Apr/4Exploit
• http://www.exploit-db.com/exploits/18690Exploit
• http://www.openwall.com/lists/oss-security/2012/04/15/2Exploit
• http://www.openwall.com/lists/oss-security/2012/04/16/10
• http://buddypress.org/2012/03/buddypress-1-5-5/Patch, Vendor Advisory
• http://osvdb.org/80763
• http://seclists.org/bugtraq/2012/Apr/4Exploit
• http://www.exploit-db.com/exploits/18690Exploit
• http://www.openwall.com/lists/oss-security/2012/04/15/2Exploit
• http://www.openwall.com/lists/oss-security/2012/04/16/10

Published

Sep 4, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-2103The qmailscan plugin for Munin 1.4.5 allows local users to o…
• CVE-2012-2104cgi-bin/munin-cgi-graph in Munin 2.x writes data to a log fi…
• CVE-2012-2105Multiple SQL injection vulnerabilities in login.php in Times…
• CVE-2012-2106Integer overflow in the pv_import function in util/pv_import…
• CVE-2012-2107Integer overflow in the main function in util/lpci_main.c in…
• CVE-2012-2108Stack-based buffer overflow in the main function in util/lpc…
• CVE-2012-2110The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in …
• CVE-2012-2111The (1) CreateAccount, (2) OpenAccount, (3) AddAccountRights…
• CVE-2012-2112Cross-site scripting (XSS) vulnerability in the Exception Ha…
• CVE-2012-2113Multiple integer overflows in tiff2pdf in libtiff before 4.0…
• CVE-2012-2114Stack-based buffer overflow in fprintf in musl before 0.8.8 …
• CVE-2012-2115SQL injection vulnerability in interface/login/validateUser.…