WordPress Lead Octopus Power SQL Injection

Exploit Title : Wordpress Lead-Octopus-Power plugin SQL INJECTION Exploit Author : Ashiyane Digital Security Team vendor Home : http://wordpress.org/ Home : www.Ashiyane.org Security Risk : HIgh Dork : inurl:wp-content/plugins/Lead-Octopus-Power/lib/optin/optinpage.php?id= Location :...

WordPress Lead Octopus Power Plugin - SQL Injection

This WordPress Lead Octopus Power plugin's "id" parameter is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...