The pretty-link plugin before 1.6.8 for WordPress has PrliLinksController::list_links SQL injection via the group parameter.

Published Oct 10, 2019 · Updated Aug 6, 2024 · Assigned by mitre