WordPress Pricing Deals for WooCommerce plugin SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Pricing Deals for WooCommerce plugin 2.0.2.02 and earlier versions are vulnerable to SQL injection, which stems from a vulnerability that occurs when parameters are not properly cleaned and escaped before being used in SQL statements via AJAX operations available to unauthenticated users. AJAX operations available to unauthenticated users do not properly clean up and escape parameters before using them in SQL statements. An attacker could exploit this vulnerability to cause unauthenticated SQL injection.