CVE-2014-5183 Information

Description

SQL injection vulnerability in includes/mode-edit.php in the Simple Retail Menus (simple-retail-menus) plugin before 4.1 for WordPress allows remote authenticated editors to execute arbitrary SQL commands via the targetmenu parameter in an edit action to wp-admin/admin.php.

Reference

http://codevigilant.com/disclosure/wp-plugin-simple-retail-menus-a1-injection https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=86117040simple-retail-menus&old=72896940simple-retail-menus&sfp_email=&sfph_mail=file1