WordPress Welcart E-Commerce SQL Injection Vulnerability

WordPress Welcart e-Commerce versions 2.12.4 and earlier have a SQL injection vulnerability. This vulnerability stems from insufficient escaping of the 'wpuscesorderold' parameter provided to users JSON field searchSql/searchSkuSql, as well as inadequate preparation of existing SQL queries. This...