WordPress Sticky Radio Player SQL Injection Vulnerability

Vulnerability

A SQL injection vulnerability has been identified in the WordPress Sticky Radio Player plugin, specifically in versions through 3.4. This vulnerability allows for improper neutralization of special elements used in SQL commands, potentially enabling attackers to manipulate database queries and interact with the database in unauthorized ways.

Impact

Exploitation of this vulnerability allows for SQL injection, which could enable a malicious actor to interact with the database directly, potentially leading to unauthorized data access or manipulation.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
3.1
exploitability
5.2
remediation
0.0
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.