Lucene search

K
wpvulndbWpvulndbWPVDB-ID:7F768BCF-ED33-4B22-B432-D1E7F95C1317
HistoryJan 06, 2022 - 12:00 a.m.

WordPress < 5.8.3 - SQL Injection via WP_Query

2022-01-0600:00:00
wpscan.com
293
wordpress
sql injection
wp_query
plugins
themes
sanitization

EPSS

0.915

Percentile

99.0%

Due to improper sanitization in WP_Query, there can be cases where SQL injection is possible through plugins or themes that use it in a certain way.