PatchTheCVEmingle-forum vulnerabilities and fixes
Recent CVEs affecting mingle-forum, with upgrade or downgrade steps. 5 tracked.
Also searched as: mingle forum.
mingle-forum has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2014-04-02. Highest priority: CVE-2013-0735 (score 47/100).
- CVE-2013-0736 MEDIUM 6.8 UPGRADE Multiple cross-site request forgery (CSRF) vulnerabilities in the Mingle Forum plugin 1.0.34 and possibly earl
- CVE-2013-0735 HIGH 7.5 UPGRADE Multiple SQL injection vulnerabilities in wpf.class.php in the Mingle Forum plugin before 1.0.34 for WordPress
- CVE-2013-0734 MEDIUM 4.3 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in the Mingle Forum plugin before 1.0.34 for WordPress all
- CVE-2012-5328 MEDIUM 6.5 UPGRADE Multiple SQL injection vulnerabilities in the Mingle Forum plugin 1.0.32.1 and other versions before 1.0.33 fo
- CVE-2012-5327 MEDIUM 6.5 UPGRADE Multiple SQL injection vulnerabilities in fs-admin/fs-admin.php in the Mingle Forum plugin 1.0.32.1 and other
FAQ
How do I fix mingle-forum vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mingle-forum being exploited right now?
None of the tracked mingle-forum CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mingle-forum CVE should I patch first?
CVE-2013-0735 currently ranks highest (47/100): Multiple SQL injection vulnerabilities in wpf.class.php in the Mingle Forum plugin before 1.0.34 for WordPress.