CVE-2015-4018

SQL injection vulnerability in feedwordpresssyndicationpage.class.php in the FeedWordPress plugin before 2015.0514 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the link_ids[] parameter in an Update action in the syndication.php page to wp-admin/admin.php.

• CWE-89

• http://packetstormsecurity.com/files/131974/WordPress-FeedWordPress-2015.0426-SQL-Injection.htmlExploit
• http://seclists.org/fulldisclosure/2015/May/75Exploit
• https://wordpress.org/plugins/feedwordpress/changelog/Patch, Vendor Advisory
• https://www.exploit-db.com/exploits/37067/Exploit
• http://packetstormsecurity.com/files/131974/WordPress-FeedWordPress-2015.0426-SQL-Injection.htmlExploit
• http://seclists.org/fulldisclosure/2015/May/75Exploit
• https://wordpress.org/plugins/feedwordpress/changelog/Patch, Vendor Advisory
• https://www.exploit-db.com/exploits/37067/Exploit

Published

May 21, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-4002drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in t…
• CVE-2015-4003The oz_usb_handle_ep_data function in drivers/staging/ozwpan…
• CVE-2015-4004The OZWPAN driver in the Linux kernel through 4.0.5 relies o…
• CVE-2015-4010Cross-site request forgery (CSRF) vulnerability in the Encry…
• CVE-2015-4016The client detection protocol in Valve Steam allows remote a…
• CVE-2015-4017Salt before 2014.7.6 does not verify certificates when conne…
• CVE-2015-4020RubyGems 2.0.x before 2.0.17, 2.2.x before 2.2.5, and 2.4.x …
• CVE-2015-4021The phar_parse_tarfile function in ext/phar/tar.c in PHP bef…
• CVE-2015-4022Integer overflow in the ftp_genlist function in ext/ftp/ftp.…
• CVE-2015-4024Algorithmic complexity vulnerability in the multipart_buffer…
• CVE-2015-4025PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6…
• CVE-2015-4026The pcntl_exec implementation in PHP before 5.4.41, 5.5.x be…