CVE-2015-5308: Wp-Championship Project Wp-Championship

High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in cs_admin_users.php in the wp-championship plugin 5.8 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) user, (2) isadmin, (3) mail service, (4) mailresceipt, (5) stellv, (6) champtipp, (7) tippgroup, or (8) userid parameter.

Affected products

• Wp-Championship Project Wp-Championship: version 5.8 only

Published 2015-11-02. Last modified 2026-06-17.