CVE-2020-27481

The Good Layers LMS Plugin (version 2.1.4 and earlier ) for WordPress is vulnerable to an unauthenticated SQL Injection . The flaw occurs because the plugin uses the wp_ajax_nopriv call to expose the gdlr_lms_cancel_booking function, which processes the id POST parameter directly in a SQL query w...