PublishPress Authors SQL Injection Vulnerability

A SQL injection vulnerability has been identified in the PublishPress Authors WordPress plugin, affecting versions through 4.7.3. This vulnerability allows for improper neutralization of special elements used in SQL commands, potentially enabling malicious actors to interact with the database and steal information.

Impact

Exploitation of this vulnerability could lead to unauthorized SQL command execution, allowing attackers to manipulate the database, potentially extracting or altering sensitive information.

Remediation

Users of the PublishPress Authors WordPress plugin should update to version 4.7.4 or later to address this vulnerability.