WordPress SQL Injection Vulnerability (CNVD-2021-70739)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress (Wordpress) Foundation. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL.A SQL injection vulnerability exists in versions of the WordPress Cashtomer component prior to 1.0.0, which stems from the lack of validation of externally entered SQL statements in database-based applications. An attacker could exploit this vulnerability to execute illegal SQL commands.