Description
The 404 Solution WordPress plugin before 2.35.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admins.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | 404 Solution | < 2.35.8 | 2.35.8 |
References
- https://wpscan.com/vulnerability/25e3c1a1-3c45-41df-ae50-0e20d86c5484/ exploit vdb-entry technical-description