Description
The SaveTo Wishlist Lite WordPress plugin before 1.1.5 does not sanitise and escape parameters before using them in the ORDER BY clause of a SQL query, allowing unauthenticated attackers to append additional SQL queries and extract sensitive information from the database.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | SaveTo Wishlist Lite | < 1.1.5 | 1.1.5 |
References
- https://wpscan.com/vulnerability/7b92ed60-7bcb-4dcf-8c57-0afcaa6809b7/ exploit vdb-entry technical-description