WordPress Plugin SQL Injection Vulnerability (CNVD-2021-101473)

WordPress is the Wordpress Foundation’s set of blogging platform developed using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers. WordPress Plugin is a WordPress open source application plugin. SQL injection vulnerability exists in the Wordpress Plugin Asgaros Forum, which stems from the product’s subscription theme feature does not validate the special characters of user input data . An attacker can execute malicious SQL statements through this vulnerability.