NotFound Traveler Code SQL Injection Vulnerability

A SQL injection vulnerability has been identified in the NotFound Traveler Code plugin for WordPress, affecting versions prior to 3.1.2. This vulnerability allows for improper neutralization of special elements used in SQL commands, potentially leading to unauthorized execution of SQL queries.

Impact

Exploitation of this vulnerability allows for arbitrary SQL execution, which could be used to manipulate the database, such as extracting sensitive information.

Remediation

Users of the NotFound Traveler Code WordPress plugin should update to version 3.1.2 or later. Patchstack users can enable auto-updates for vulnerable plugins.