logo
DATABASE RESOURCES PRICING ABOUT US

Export Users With Meta < 0.6.5 - Authenticated SQL Injection

Description

The plugin did not escape the list of roles to export before using them in a SQL statement in the export functionality, available to admins, leading to an authenticated SQL Injection.


Related