WordPress Plugin LeagueManager 3.8 SQLI

Description

An SQL Injection vulnerability exists in the league_id parameter of a function call made by the leaguemanager_export page.

Recommendation

To mitigate the risk, update the affected plugin to a secure version. If an update is not available or feasible, consider removing the plugin from your WordPress installation.

References

LeagueManager Plugin
WordPress
CVE-2013-1852
CAPEC-310
OWASP 2021-A6

Could your website be exposed too?

SmartScanner can check your website for WordPress Plugin LeagueManager 3.8 SQLI and gives you actionable findings to investigate.

Start a free scan

Related Issues

WordPress Plugin Smart Google Code Inserter 3.5 SQLI - CVE-2018-3810
WordPress Plugin AdRotate 3.6.5 SQLI - CVE-2011-4671
WordPress Plugin AdRotate 3.6.6 SQLI - CVE-2011-4671
WordPress Plugin AdRotate 3.9.4 SQLI - CVE-2014-1854

44 New SQL Injection Tests for WordPress in SmartScanner 1.8

CSRF, XXE, and 12 Other Security Acronyms Explained

3 reasons why any website's security is important

See something that needs correcting? Let us knowUpdated May 13, 2024