Threats tagged 'ghsa-cr7x-4whh-v74w'

The Recipe Card Blocks Lite WordPress plugin versions before 3.6.4 contain a vulnerability where a block and shortcode attribute is not properly sanitized and cast before being concatenated into SQL queries. This flaw allows authenticated users with Contributor-level access or higher to perform SQL injection attacks.