Threats tagged 'ghsa-4mfw-7m87-4pf8'

The WP Inventory Manager plugin for WordPress versions up to and including 2.5.5 contains a time-based SQL Injection vulnerability via the 'sort_order' shortcode attribute. This flaw allows authenticated users with contributor-level access or higher to inject additional SQL queries due to insufficient escaping and preparation of the 'sort_order' parameter. Exploitation can occur through the [wpinventory_categories] shortcode in a draft post preview without needing the post to be published.