WordPress The WP Visitor Statistics Plugin SQL Injection Vulnerability

WordPress is a blogging platform developed by the Wordpress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. SQL injection vulnerability exists in versions of WordPress prior to The WP Visitor Statistics Plugin 5.6, which stems from the fact that refUrlDetails AJAX does not clean up and escape the id parameter. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.