WordPress Ultimate Push Notifications Plugin SQL Injection Vulnerability
Vulnerability
A SQL injection vulnerability has been identified in the WordPress Ultimate Push Notifications plugin, affecting versions through 1.1.8. This vulnerability allows attackers to improperly manipulate SQL commands, potentially leading to unauthorized database access or data manipulation.
Impact
Exploitation of this vulnerability allows for direct interaction with the database, which could include stealing information or manipulating database contents.
Remediation
Users of the WordPress Ultimate Push Notifications plugin are advised to update to the latest version. For those unable to update immediately, Patchstack offers a virtual patch that blocks attacks targeting this vulnerability.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.