WordPress Behance Portfolio Manager SQL Injection Vulnerability

A SQL injection vulnerability has been identified in the WordPress Behance Portfolio Manager plugin, affecting versions through 1.7.4. This vulnerability allows for improper neutralization of special elements used in SQL commands, enabling malicious actors to interact with the database in unauthorized ways.

Impact

Exploitation of this vulnerability allows for SQL injection, which could enable a malicious actor to manipulate the database, potentially leading to unauthorized data access or modification.

Remediation

Users are advised to remove and replace the Behance Portfolio Manager plugin, as it is likely abandoned and will not receive further updates or fixes.