WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plug-in. A SQL injection vulnerability exists in versions prior to WordPress Pricing Table s plugin 3.6.1, which stems from a failure to properly clean and escape user-supplied POST data. An attacker could exploit this vulnerability to perform AJAX operations.