Melapress File Monitor WordPress Plugin SQL Injection Vulnerability

A SQL injection vulnerability has been identified in the Melapress File Monitor WordPress plugin, affecting versions prior to 2.1.1. The issue arises because the plugin fails to properly sanitize and escape a parameter before incorporating it into a SQL statement. This oversight enables administrators to execute SQL injection attacks.

Impact

Exploitation of this vulnerability allows for authenticated SQL injection, where an attacker could manipulate SQL queries to the database. This could lead to unauthorized data access, data manipulation, or in some cases, executing administrative operations in the WordPress environment.

Remediation

Users are advised to update the Melapress File Monitor WordPress plugin to version 2.1.1 or later.