Description
SQL injection vulnerability in options.php in WordPress 2.2.1 allows remote authenticated administrators to execute arbitrary SQL commands via the page_options parameter to (1) options-general.php, (2) options-writing.php, (3) options-reading.php, (4) options-discussion.php, (5) options-privacy.php, (6) options-permalink.php, (7) options-misc.php, and possibly other unspecified components.
Remediation
References
Related Vulnerabilities
PHP Numeric Errors Vulnerability (CVE-2014-3669)
Drupal Core 4.7.x Security Bypass (4.7.0 - 4.7.7)
WordPress Plugin UpdraftPlus WordPress Backup Cross-Site Scripting (1.13.4)
WordPress Plugin Database for Contact Form 7, WPforms, Elementor forms Cross-Site Scripting (1.1.5)
WordPress 4.7.x Cross-Domain Flash Injection Vulnerability (4.7 - 4.7.8)