SQL Injection

Wordpress is vulnerable to SQL injection. The $wpdb-prepare method creates and executes arbitrary SQL statements within plugins and themes...