WordPress Plugin SQL Injection Vulnerability (CNVD-2021-101472)

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the server in PHP and MySQL to set up a personal blog site. WordPress Plugin is a WordPress open source application plug-ins. wordpress Plugin Header Footer Code Manager in the...

PT-2021-16286

Name of the Vulnerable Software and Affected Versions: The Header Footer Code Manager WordPress plugin versions prior to 1.1.14 Description: The issue arises from the lack of validation and escaping of the orderby and order request parameters before they are used in a SQL statement when viewing t...

CVE-2021-24791: Improper Neutralization of Special Elements used in an SQL Command

The Header Footer Code Manager WordPress plugin before 1.1.14 does not validate and escape the "orderby" and "order" request parameters before using them in a SQL statement when viewing the Snippets admin dashboard, leading to SQL injections...