Infility Global WordPress Plugin SQL Injection Vulnerability
Vulnerability
A SQL injection vulnerability has been identified in the Infility Global WordPress plugin, affecting versions through 2.12.4. This vulnerability allows for improper neutralization of special elements used in SQL commands, enabling direct interaction with the database, such as unauthorized data access or manipulation.
Impact
Exploitation of this vulnerability allows for SQL injection, enabling attackers to interact with the database in unauthorized ways, potentially leading to data theft or manipulation.
Remediation
Users of the Infility Global WordPress plugin are advised to update to a version later than 2.12.4. For those unable to update immediately, Patchstack offers a virtual patch that can be applied to mitigate the vulnerability until an official update is available.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.