3 matches found
WordPress Advance Post Prefix plugin <= 1.1.1 - Admin+ SQL Injection vulnerability
Admin+ SQL Injection vulnerability discovered by Bob Matyas in WordPress Plugin Advance Post Prefix versions = 1.1.1...
CVE-2024-12735
The Advance Post Prefix WordPress plugin through 1.1.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins and above to perform SQL injection attacks...
CVE-2024-12735 Advance Post Prefix <= 1.1.1 - Admin+ SQL Injection
The Advance Post Prefix WordPress plugin through 1.1.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins and above to perform SQL injection attacks...