WordPress - Post Author Authenticated SQLi

T1Covered by 1 source · first reported by Tenable Research at 09 Oct, 14:40 UTC

WordPress - Post Author Authenticated SQLi Two REST handlers build SQL queries by concatenating client-supplied request parameters straight into the query string. There is no $wpdb->prepare(), no esc_like(), and no whitelisting. The only processing applied is sanitize_text_field(), which trims…

security

Sources

• T1WordPress - Post Author Authenticated SQLiTenable Research09 Oct, 14:40