WordPress Plugin WonderPlugin Audio Player 2.0 - Blind SQL Injection Cross-Site Scripting

WordPress Plugin WonderPlugin Audio Player 2.0 - Blind SQL Injection Cross-Site Scripting Exploit Title: WonderPlugin Audio Player 2.0 Blind SQL Injection and XSS Date: 20-01-2015 Software Link: http://www.wonderplugin.com/wordpress-audio-player/ Exploit Author: Kacper Szurek Contact:...