WordPress - Post Author Second Order SQLi

T1Covered by 1 source · first reported by Tenable Research at 09 Oct, 14:52 UTC

WordPress - Post Author Second Order SQLi A regression was introduced in version 4.0.0 of WP Post Author, the multi-authors module stores the co-author list in the wpma_author post meta and later interpolates each stored value directly into a SQL query. Neither end of that path is safe. On write…

releasessecurity

Sources

• T1WordPress - Post Author Second Order SQLiTenable Research09 Oct, 14:52