Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:5214
HistoryOct 03, 2017 - 6:39 a.m.

SQL Injection

2017-10-0306:39:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

0.004 Low

EPSS

Percentile

72.9%

WordPress is susceptible to SQL injection attacks. The attacks exist because the library does not check the additional values for placeholders in wpdb->prepare and does not escape percent % characters.