Threats tagged 'ghsa-rv5m-5pv4-6hxw'

The Ukr-To-Lat WordPress plugin versions up to and including 1.3.5 contain a SQL injection vulnerability. This flaw arises because the plugin does not properly sanitize and escape a term name before including it in a SQL query. Users with Contributor-level access or higher can exploit this vulnerability to perform SQL injection attacks. The vulnerability has a CVSS score of 6.8, indicating medium severity. There is no information about available patches or fixes at this time.