WordPress 插件 SQL注入漏洞

WordPress Plugin is an open source application plugin for WordPress. A SQL injection vulnerability exists in the WordPress plugin WP Bannerize, which stems from an id parameter in the /Classes/wpBannerizeAdmin.php file that allows an attacker to steal sensitive information from a vulnerable site...

WP Bannerize 2.0.0 - 4.0.2 - Authenticated SQL Injection

The plugin is vulnerable to authenticated SQL injection via the id parameter found in the /Classes/wpBannerizeAdmin.php file which allows attackers to exfiltrate sensitive information from vulnerable sites...