WordPress Attendance Manager plugin <= 0.6.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by daroo in WordPress Plugin Attendance Manager versions = 0.6.2...

PT-2026-31098

The Attendance Manager plugin for WordPress is vulnerable to SQL Injection via the 'attmgr off' parameter in all versions up to, and including, 0.6.2. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

WordPress Attendance Manager Plugin Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.Attendance Manager Plugin is an attendance management plugin used in it. A cross-site scripting vulnerability exists in...