Threats tagged 'ghsa-4w56-74rv-wjqf'

The LetsRecover WordPress plugin up to version 1.2.0 contains a vulnerability where it does not sanitize a user-supplied value used as a database column name in an unauthenticated AJAX action. This flaw allows unauthenticated attackers to append SQL to the query and read arbitrary data from the database, which is then exposed through another unauthenticated action.