WP RSS By Publishers <= 0.1 - Admin+ SQLi

CVE-2022-4360

Summary

The WP RSS By Publishers plugin for WordPress, specifically versions up to 0.1, is susceptible to SQL injection due to improper sanitization and escaping of parameters in SQL statements. This vulnerability allows high privilege users, such as administrators, to manipulate database queries, potentially leading to unauthorized data access or modification. It is crucial for users of this plugin to assess their installations and apply necessary updates to mitigate potential security risks.

References