WordPress Church Admin plugin <= 5.0.18 - SQL Injection vulnerability

SQL Injection vulnerability discovered by NAWardRox Patchstack Alliance in WordPress Plugin Church Admin versions = 5.0.18...

Mysql log file obfuscation

MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysqlrealquery function. NOTE: this issue was originally reported for the mysqlquery function, but the vendor states that since mysqlquer...