CVE-2017-1002025

The CVE-2017-1002025 entry concerns the WordPress plugin add-edit-delete-listing-for-member-module (version 1.0). Connected sources confirm a SQL Injection flaw caused by the plugin failing to sanitize user input via the $act parameter before interpolating it into an SQL statement. This root caus...