CVE-2014-7959

CVE-2014-7959 is a SQL injection vulnerability in the BulletProof Security WordPress plugin prior to version 0.51.1, specifically in admin/htaccess/bpsunlock.php. The flaw allows remote authenticated users to execute arbitrary SQL commands through the tableprefix parameter. The vulnerability is c...