Volerion logoVolerion
Volerion logoVolerion

WP-PManager WordPress Plugin SQL Injection Vulnerability

Vulnerability

A SQL injection vulnerability has been identified in the WP-PManager WordPress plugin, affecting versions through 1.2. The issue arises because the plugin fails to properly sanitize and escape a parameter before incorporating it into a SQL statement, which could allow administrators to execute malicious SQL commands.

Impact

Exploitation of this vulnerability could lead to unauthorized SQL command execution, potentially allowing attackers to manipulate the database or access sensitive information.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
3.4
impact
2.5
exploitability
6.3
remediation
0.0
relevance
0.0
threat
6.4
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.