Related Sites <= 2.2 - SQL Injection
criticalSQL injection vulnerability in BTE_RW_webajax.php in the Related Sites plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the guid parameter.
- CVSS:
- 9.8
- Affected:
- up to 2.2
- Fixed in:
- 2.2.1
- Disclosed:
- Jun 30, 2009