Threats tagged 'ghsa-xf7x-7w69-85mx'

The WP Directory Kit plugin for WordPress versions up to and including 1.6.0 is vulnerable to a generic SQL Injection via the 'idfield' parameter. This vulnerability arises from insufficient escaping of user input and inadequate preparation of the SQL query, allowing unauthenticated attackers to inject additional SQL commands. The flaw can be exploited to extract sensitive information from the database without authentication.