Threats tagged 'ghsa-gp8v-vc4r-wpf4'

A SQL injection vulnerability exists in the Content Views WordPress plugin versions before 4.5. The flaw arises because the plugin does not perform a capability check on one of its AJAX actions and fails to properly sanitize attacker-supplied input before using it in a SQL query. This allows any authenticated user, including those with minimal privileges such as Subscribers, to execute SQL injection attacks.