WordPress amtyThumb plugin SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress amtyThumb plugin 4.2.0 and earlier versions are vulnerable to SQL injection, which stems from the application’s failure to clean up and escape parameters before they are used in SQL statements via their shortcodes. and escaping. An authenticated attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.