« Back to list

CVE-2009-4748

Status: ModifiedHigh (7.5)—💥 Exploit

SQL injection vulnerability in mycategoryorder.php in the My Category Order plugin 2.8 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the parentID parameter in an act_OrderCategories action to wp-admin/post-new.php.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

💥 Public exploits

Exploit code or detection templates are publicly available. This is not the same as confirmed active exploitation (KEV), but it raises the risk: patch with priority.

Affected technologies (1)

Andrew Charlton — MY Category Order

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2009-4748",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-03-26T20:30:00.610",
  "references": [
    {
      "url": "http://packetstormsecurity.org/0907-exploits/wpmco-sql.txt",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.exploit-db.com/exploits/9150",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/35704",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/51727",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://packetstormsecurity.org/0907-exploits/wpmco-sql.txt",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.exploit-db.com/exploits/9150",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/35704",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/51727",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-89"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "SQL injection vulnerability in mycategoryorder.php in the My Category Order plugin 2.8 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the parentID parameter in an act_OrderCategories action to wp-admin/post-new.php."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de inyección SQL en mycategoryorder.php en el plugin My Category Order v2.8 y anteriores para WordPress, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro parentID en una acción act_OrderCategories sobre wp-admin/post-new.php."
    }
  ],
  "lastModified": "2026-06-16T23:14:17.017",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:andrew_charlton:my_category_order:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FB42535F-5375-4A9E-81A4-1D6B9DAC509D",
              "versionEndIncluding": "2.8"
            },
            {
              "criteria": "cpe:2.3:a:andrew_charlton:my_category_order:2.6.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FC8A48F4-863F-453F-B51C-5F840B71C40A"
            },
            {
              "criteria": "cpe:2.3:a:andrew_charlton:my_category_order:2.6.1a:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AAE77258-9C35-4F15-85C0-19076BA1E28B"
            },
            {
              "criteria": "cpe:2.3:a:andrew_charlton:my_category_order:2.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9987BA6E-36D6-45AA-9ABB-11272D21726E"
            },
            {
              "criteria": "cpe:2.3:a:andrew_charlton:my_category_order:2.7.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FF39C70A-7DE1-48EB-94D8-199D55CDCBC3"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "847DA578-4655-477E-8A6F-99FBE738E4F9"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}