plugin

Sql Shortcode Vulnerabilities

1 known security issue reported for the Sql Shortcode WordPress plugin. Most recent disclosed Sep 2, 2017.

1 high

Running Sql Shortcode on your site? Check whether your installed version is affected.

SQL Shortcode <= 1.1 - SQL Execution

high

The SQL Shortcode plugin for WordPress is vulnerable to SQL Execution in versions up to, and including, 1.1. This is due to the user inputted information being directly submitted to an SQL query. This makes it possible for authenticated attackers to execute arbitrary SQL code.

CVSS:: 8.8
Affected:: up to 1.1
Fix:: No patched version reported
Disclosed:: Sep 2, 2017

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database