Thisvulnerability allows an authenticated user to execute arbitrary SQL commands in an edit delete-variation action via the βpostβ parameter to wp-admin/post.php.
Upgrade the plugin.
CPE | Name | Operator | Version |
---|---|---|---|
landing pages | le | 1.8.4 |