{"id":"CVE-2014-3961","aliases":["EUVD-2014-3894","GHSA-g887-5vqh-7jc5"],"status":"published","title":"SQL injection vulnerability in the Export CSV page in the Participants Database plugin before 1.5...","description":"SQL injection vulnerability in the Export CSV page in the Participants Database plugin before 1.5.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the query parameter in an \"output CSV\" action to pdb-signup/.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.05643,"percentile":0.93007,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-89"],"published":"2014-06-04T14:00:00Z","modified":"2026-06-17T00:09:12Z","exploits":[{"source":"exploitdb","id":"EDB-33613","title":"WordPress Plugin Participants Database 1.5.4.8 - SQL Injection","type":"webapps","platform":"php","date":"2014-06-02","url":"https://www.exploit-db.com/exploits/33613"}],"products":[{"vendor":"xnau","product":"participants_database"}],"references":[{"url":"http://packetstormsecurity.com/files/126878/WordPress-Participants-Database-1.5.4.8-SQL-Injection.html","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"https://www.yarubo.com/advisories/1","tags":["x_refsource_MISC","x_transferred","Exploit","URL Repurposed"]},{"url":"http://www.exploit-db.com/exploits/33613","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit"]},{"url":"https://wordpress.org/plugins/participants-database/changelog","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"http://seclists.org/fulldisclosure/2014/Jun/0","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Exploit"]},{"url":"http://osvdb.org/show/osvdb/107626","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.securityfocus.com/bid/67769","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3961"},{"url":"https://github.com/advisories/GHSA-g887-5vqh-7jc5"}],"sources":{"cve":[{"id":"CVE-2014-3961","description":"SQL injection vulnerability in the Export CSV page in the Participants Database plugin before 1.5.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the query parameter in an \"output CSV\" action to pdb-signup/.","status":"published","published":"2014-06-04T14:00:00Z","modified":"2024-09-16T16:27:38.978Z","updated_at":"2026-11-02T14:33:44.569327Z"}],"euvd":[{"id":"EUVD-2014-3894","description":"SQL injection vulnerability in the Export CSV page in the Participants Database plugin before 1.5.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the query parameter in an \"output CSV\" action to pdb-signup/.","status":"published","published":"2014-06-04T14:00:00Z","modified":"2024-09-16T16:27:38Z","updated_at":"2026-11-03T00:55:51.557415Z"}],"ghsa":[{"id":"GHSA-g887-5vqh-7jc5","title":"SQL injection vulnerability in the Export CSV page in the Participants Database plugin before 1.5...","description":"SQL injection vulnerability in the Export CSV page in the Participants Database plugin before 1.5.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the query parameter in an \"output CSV\" action to pdb-signup/.","status":"published","published":"2022-05-17T04:42:40Z","modified":"2023-01-28T05:02:20Z","cwes":["CWE-89"],"updated_at":"2026-11-02T14:43:45.797636Z"}],"nvd":[{"id":"CVE-2014-3961","description":"SQL injection vulnerability in the Export CSV page in the Participants Database plugin before 1.5.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the query parameter in an \"output CSV\" action to pdb-signup/.","status":"published","published":"2014-06-04T14:55:07.047Z","modified":"2026-06-17T00:09:12.59Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:02:54.464139Z"}]}}