WPListCal SQL Injection Vulnerability
Vulnerability
A SQL injection vulnerability has been identified in the WPListCal WordPress plugin, affecting versions through 1.3.5. This vulnerability allows attackers to manipulate SQL queries, potentially leading to unauthorized database access or data manipulation.
Impact
Exploitation of this vulnerability allows for direct interaction with the database, which could include stealing information or manipulating database contents.
Remediation
Users are advised to update to a version of the WPListCal plugin that is not affected by this vulnerability. Patchstack has issued a virtual patch to mitigate this issue for users until an official fix is available.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.