← Back

Andrew Charlton

andrew_charlton

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
My Category Order
my_category_order
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2009-4748
1Andrew Charlton
1My Category Order
Apr 29, 2026
Mar 26, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in mycategoryorder.php in the My Category Order plugin 2.8 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the parentID parameter in an act_OrderCategor...Show more
SQL injection vulnerability in mycategoryorder.php in the My Category Order plugin 2.8 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the parentID parameter in an act_OrderCategories action to wp-admin/post-new.php.Show less