CVE-2014-5185

no score yetEPSS 1.9%

SQL injection vulnerability in the Quartz plugin 1.01.1 for WordPress allows remote authenticated users with Contributor privileges to execute arbitrary SQL commands via the quote parameter in an edit action in the quartz/quote_form.php page to wp-admin/edit.php.

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 80% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2014-08-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

quartz_plugin_project:quartz_plugin

References

http://codevigilant.com/disclosure/wp-plugin-quartz-a1-injection
http://codevigilant.com/disclosure/wp-plugin-quartz-a1-injection

Check your stack JSON