Ads Pro WordPress Plugin SQL Injection Vulnerability
Vulnerability
A SQL injection vulnerability has been identified in the Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager, affecting all versions through 4.89. The vulnerability arises from inadequate escaping of user-supplied parameters in the getSpace() function, allowing unauthenticated attackers to inject additional SQL queries. This exploitation could lead to unauthorized access to sensitive database information.
Impact
Exploitation of this vulnerability allows for SQL injection, enabling attackers to manipulate database queries and potentially access or extract sensitive information from the database.
Remediation
No known patch is available. Users are advised to review the vulnerability details and consider uninstalling the affected plugin.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.