WordPress plugin
Yellow Swordfish Simple Forum security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical1
- High0
- Medium0
- Low0
All Yellow Swordfish Simple Forum vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Critical9.8 | SQL Injection ≤1.11No patch available | CVE-2008-7040 |
- Critical9.8SQL Injection
≤1.11No patch available
Yellow Swordfish Simple Forum: common questions
Does Yellow Swordfish Simple Forum have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in Yellow Swordfish Simple Forum: 1 critical. At least one is not fixed in the latest version.
How do I check which version of Yellow Swordfish Simple Forum I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Yellow Swordfish Simple Forum vulnerability?
CVE-2008-7040, published Feb 16, 2008: Yellow Swordfish Simple Forum <= 1.11 - SQL Injection. Severity: Critical (CVSS 9.8).
Is any Yellow Swordfish Simple Forum vulnerability listed in CISA KEV?
No. None of the known Yellow Swordfish Simple Forum vulnerabilities is currently listed in the CISA KEV catalog.