WordPress security by component

Xoops

Plugin description

Xoops is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jul 12, 2017; the highest CVE/CNA score is 9.8.

Plugin slug: xoops

Latest vulnerability

CVE-2017-11174: Xoops: SQL injection

Xoops is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.

PublishedJul 12, 2017

Safe version guidanceSee mitigation notes

		Safe version
Jul 12, 2017	CVE-2017-11174 Xoops: SQL injection Xoops is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE9.8 NVD9.8