CVE-2016-0769

Multiple SQL injection vulnerabilities in eshop-orders.php in the eShop plugin 6.3.14 for WordPress allow (1) remote administrators to execute arbitrary SQL commands via the delid parameter or remote authenticated users to execute arbitrary SQL commands via the (2) view, (3) mark, or (4) change parameter.

• CWE-89

• http://www.openwall.com/lists/oss-security/2016/02/02/3Exploit, Third Party Advisory
• http://www.securityfocus.com/bid/82347Third Party Advisory, VDB Entry
• http://www.vapid.dhs.org/advisory.php?v=160Exploit, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/02/02/3Exploit, Third Party Advisory
• http://www.securityfocus.com/bid/82347Third Party Advisory, VDB Entry
• http://www.vapid.dhs.org/advisory.php?v=160Exploit, Third Party Advisory

Published

Jan 23, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-0763The setGlobalContext method in org/apache/naming/factory/Res…
• CVE-2016-0764Race condition in Network Manager before 1.0.12 as packaged …6.2
• CVE-2016-0765Multiple cross-site scripting (XSS) vulnerabilities in eshop…
• CVE-2016-0766PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before …8.8
• CVE-2016-0767PostgreSQL PL/Java before 1.5.0 allows remote authenticated …6.5
• CVE-2016-0768PostgreSQL PL/Java after 9.0 does not honor access controls …
• CVE-2016-0770Cross-site scripting (XSS) vulnerability in includes/admin/p…
• CVE-2016-0771The internal DNS server in Samba 4.x before 4.1.23, 4.2.x be…
• CVE-2016-0772The smtplib library in CPython (aka Python) before 2.7.12, 3…
• CVE-2016-0773PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before …
• CVE-2016-0774The (1) pipe_read and (2) pipe_write implementations in fs/p…
• CVE-2016-0775Buffer overflow in the ImagingFliDecode function in libImagi…