WordPress Plugin SCORM Cloud 1.0.6.6 SQLI

Description

SQL injection is a type of attack where malicious SQL queries are inserted into input data, allowing attackers to manipulate the database. Successful exploitation can lead to data theft, modification of database records, unauthorized access, and even control over the entire database management system (DBMS).

Recommendation

Update or remove the affected plugin.

References

WordPress: SCORM Cloud
OWASP: SQL Injection
OWASP: ESAPI project
Wikipedia: Prepared statement
WordPress
CWE-20
CWE-89
CAPEC-66
CAPEC-310
OWASP 2021-A3
OWASP 2021-A6

Could your website be exposed too?

SmartScanner can check your website for WordPress Plugin SCORM Cloud 1.0.6.6 SQLI and gives you actionable findings to investigate.

Start a free scan

Related Issues

WordPress Plugin Event Registration 5.4.3 SQLI - Vulnerability
WordPress Plugin Eventify Simple Events 1.7.f SQLI - Vulnerability
WordPress Plugin Facebook Promotions 1.3.3 SQLI - Vulnerability
WordPress Plugin File Groups 1.1.2 SQLI - Vulnerability

These 7 PHP mistakes leave your website open to the hackers

44 New SQL Injection Tests for WordPress in SmartScanner 1.8

3 reasons why any website's security is important

See something that needs correcting? Let us knowUpdated May 13, 2024