CVE-2022-0254: Improper Neutralization of Special Elements used in an SQL Command

The WordPress Zero Spam WordPress plugin before 5.2.11 does not properly sanitise and escape the order and orderby parameters before using them in a SQL statement in the admin dashboard, leading to a SQL injection...

PT-2022-13072

Name of the Vulnerable Software and Affected Versions WordPress Zero Spam WordPress plugin versions prior to 5.2.11 Description The issue arises from the improper sanitization and escaping of the order and orderby parameters before they are used in a SQL statement within the admin dashboard,...