WordPress Note Press plugin SQL injection vulnerability (CNVD-2022-64665)

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. FormCraft is one of the form creation plugins used in it. WordPress plugin is an application plugin. WordPress Note Press plugin 0.1.10 and earlier versions are vulnerable to a SQL injection vulnerability that stems from the plugin The update parameters used when updating notes via the admin dashboard are not filtered and escaped. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.