Most Popular Posts Widget < 0.9 - Admin+ SQL injection

2023-10-0200:00:00

wpscan.com

sql injection

widget

admin+

logs

validation

software

AI Score

7.4

Confidence

Low

EPSS

0.001

Percentile

32.4%

JSON

Description The plugin does not properly validate and escape the “orderby” GET parameter before using it in a SQL statement when viewing the logs, leading to an SQL Injection issue