CVE-2012-10009

CVE-2012-10009 describes a critical SQL injection vulnerability in the 404like Plugin for WordPress, affecting versions up to 1.0.2. Specifically, the checkPage function in 404Like.php is susceptible to manipulation of the searchWord argument, allowing remote attackers to execute arbitrary SQL commands. This vulnerability carries a CVSS score of 9.8 (Critical), indicating it can be exploited remotely with low attack complexity and no user interaction, leading to high impacts on confidentiality, integrity, and availability. The CWE-89 classification confirms it as a classic SQL Injection flaw. Despite its critical severity, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are minimal, suggesting low public awareness.