CVE-2013-6243

Estado: ModificadaAlta (7.5)—
SQL injection vulnerability in the Landing Pages plugin 1.2.3, before 20131009, and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the "post" parameter to index.php.
CVSS

Versión: 2.0
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Puntuación base: 7.5
Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días: 2.49%
Percentil entre todas las CVEs puntuadas: 84
Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)

Landing Pages Project — Landing Pages Plugin
CWE

CWE-89
Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-6243",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-10-23T16:54:28.957",
  "references": [
    {
      "url": "http://osvdb.org/98334",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://plugins.trac.wordpress.org/changeset?reponame=&old=785535%40landing-pages&new=785535%40landing-pages",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/55192",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://wordpress.org/plugins/landing-pages/changelog",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/62942",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/87803",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/98334",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://plugins.trac.wordpress.org/changeset?reponame=&old=785535%40landing-pages&new=785535%40landing-pages",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/55192",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://wordpress.org/plugins/landing-pages/changelog",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/62942",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/87803",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-89"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "SQL injection vulnerability in the Landing Pages plugin 1.2.3, before 20131009, and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the \"post\" parameter to index.php."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de inyección SQL en el plugin Landing Pages 1.2.3, anterior a 20131009, y anteriores para WordPress permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de parámetros \"post\" a index.php."
    }
  ],
  "lastModified": "2026-06-17T00:00:12.940",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:landing_pages_project:landing_pages_plugin:*:-:*:*:*:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EE87116C-0564-4EE5-9DBD-B4D47AF185E5",
              "versionEndIncluding": "1.2.3"
            },
            {
              "criteria": "cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.3.7:-:*:*:*:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A74B615B-C04A-4944-B138-005CDD026969"
            },
            {
              "criteria": "cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.3.8:-:*:*:*:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A9E5992C-89D7-436E-B0F3-5E1A7460AEF9"
            },
            {
              "criteria": "cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.3.9:-:*:*:*:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0C52C44E-F4A3-4A7F-AED8-513AD6B180BA"
            },
            {
              "criteria": "cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.4.1:-:*:*:*:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A0029150-7475-484D-A2E1-D4AB4035AC01"
            },
            {
              "criteria": "cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.4.2:-:*:*:*:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "167FF090-6269-4FBC-B929-831400030045"
            },
            {
              "criteria": "cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.4.4:-:*:*:*:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C7525348-476D-41E9-A675-65FE900403B9"
            },
            {
              "criteria": "cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.5.1:-:*:*:*:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "30FF3CCF-6A74-47DC-A8F4-B13606CC9360"
            },
            {
              "criteria": "cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.5.3:-:*:*:*:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E81D0950-F785-47AB-8F17-376733F912C2"
            },
            {
              "criteria": "cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.5.6:-:*:*:*:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "83993E2C-042A-46D3-9892-CF2345EDC349"
            },
            {
              "criteria": "cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.7.1:-:*:*:*:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E0B86A08-2F1D-422E-8E98-728B341B816D"
            },
            {
              "criteria": "cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.7.3:-:*:*:*:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A52EA2CB-1FF5-47B5-8C16-BF6D438A1C16"
            },
            {
              "criteria": "cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.7.9:-:*:*:*:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A5BC6816-715C-44E0-81FC-B165422D6637"
            },
            {
              "criteria": "cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.8.1:-:*:*:*:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8973AE36-6747-4085-829A-D954109F7F66"
            },
            {
              "criteria": "cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.8.4:-:*:*:*:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5375F5DD-FA7E-493B-9729-60425F544316"
            },
            {
              "criteria": "cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.8.5:-:*:*:*:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "76849099-25E1-4DDF-B241-829787FB27F8"
            },
            {
              "criteria": "cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.8.6:-:*:*:*:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "72E1C74C-56A7-4A8F-B588-C2453432A78E"
            },
            {
              "criteria": "cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.9.0:-:*:*:*:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "67F9F6AC-77E7-4683-AF63-F11BF4B9862B"
            },
            {
              "criteria": "cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.9.3:-:*:*:*:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "33FBB986-E432-45F2-BCD9-CE16E51EAC83"
            },
            {
              "criteria": "cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.9.4:-:*:*:*:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D32A4FA2-BB59-4141-8060-BFE9C317D6E7"
            },
            {
              "criteria": "cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.9.9:-:*:*:*:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0547E572-1B92-493D-86F5-318F287B2D39"
            },
            {
              "criteria": "cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.1:-:*:*:*:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "916276B8-6CC0-4BB7-A6E8-3457228B4E8E"
            },
            {
              "criteria": "cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.1.0.1:-:*:*:*:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "794B073F-29B0-4412-BACA-9C0B3B6264FE"
            },
            {
              "criteria": "cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.1.7:-:*:*:*:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A5D94CA0-FE6C-474F-9AA5-E8D8048D6F09"
            },
            {
              "criteria": "cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.1.8:-:*:*:*:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AD97E72A-98C1-4BE7-8742-FB771CFEEBF8"
            },
            {
              "criteria": "cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.1.9:-:*:*:*:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F20D5493-17DD-4A8F-B893-B21710E7D864"
            },
            {
              "criteria": "cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.2.1:-:*:*:*:wordpress:*:*",
              "vulnerable": true,
              "matchCriteriaId": "03817DFE-016D-4335-B6BD-5AEDBBC21381"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}