CVE-2009-2122

no score yetEPSS 2.7%

SQL injection vulnerability in viewimg.php in the Paolo Palmonari Photoracer plugin 1.0 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.

EPSS: 2.7% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2009-06-19
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

paolo_palmonari:photoracer_plugin_for_wordpress

References

http://secunia.com/advisories/35450
http://www.securityfocus.com/bid/35382
https://exchange.xforce.ibmcloud.com/vulnerabilities/51152
https://www.exploit-db.com/exploits/8961
http://secunia.com/advisories/35450

Check your stack JSON