G-Lock Double Opt-in Manager <= 2.6.5 - SQL Injection
highThe G-Lock Double Opt-in Manager plugin for WordPress is vulnerable to generic SQL Injection via the 'json' parameter in versions up to, and including, 2.6.5 due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticate...
- CVSS:
- 8.8
- Affected:
- up to 2.6.5
- Fix:
- No patched version reported
- Disclosed:
- Aug 1, 2014