Description
SQL injection is a type of attack where malicious SQL queries are inserted into input data, allowing attackers to manipulate the database. Successful exploitation can lead to data theft, modification of database records, unauthorized access, and even control over the entire database management system (DBMS).
Recommendation
Update or remove the affected plugin.
References
- WordPress: SCORM Cloud
- OWASP: SQL Injection
- OWASP: ESAPI project
- Wikipedia: Prepared statement
- WordPress
- CWE-20
- CWE-89
- CAPEC-66
- CAPEC-310
- OWASP 2021-A3
- OWASP 2021-A6
Related Issues
- WordPress Plugin Post Highlights 2.2 SQLI - Vulnerability
- WordPress Plugin Yolink Search 1.1.4 SQLI - Vulnerability
- WordPress Plugin Paid Downloads 2.01 SQLI - Vulnerability
- WordPress Plugin AdRotate 3.6.5 SQLI - CVE-2011-4671
- Tags:
- Wordpress
- SQLI
- Injection
Anything's wrong? Let us know Last updated on May 13, 2024