← WordPress Vulnerabilities
WordPress security by component

Mingle Forum

Mingle Forum is a WordPress component with 5 published CVE records in this archive. The latest tracked vulnerability was published Apr 02, 2014; the highest CVE/CNA score is 7.5.

Plugin slug: mingle-forum

CVE-2013-0735: Mingle Forum: SQL injection

Mingle Forum is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.

PublishedApr 02, 2014
Safe version guidanceSee mitigation notes
Safe version
Apr 02, 2014 CVE-2013-0735
Mingle Forum: SQL injection
Mingle Forum is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE7.5
NVD7.5
Mar 28, 2014 CVE-2013-0734
Mingle Forum: Cross-site scripting
Mingle Forum is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE4.3
NVD4.3
Oct 09, 2013 CVE-2013-0736
Mingle Forum: Cross-site scripting
Mingle Forum is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.8
NVD6.8
Oct 08, 2012 CVE-2012-5328
Mingle Forum: SQL injection
Mingle Forum is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE6.5
NVD6.5
Oct 08, 2012 CVE-2012-5327
Mingle Forum: SQL injection
Mingle Forum is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE6.5
NVD6.5