QuanticaLabs GymBase Theme Classes SQL Injection Vulnerability

A SQL injection vulnerability has been identified in the QuanticaLabs GymBase Theme Classes plugin, affecting versions through 1.4. This vulnerability arises from improper neutralization of special elements used in SQL commands, allowing malicious actors to manipulate database queries and potentially access or modify database information.

Impact

Exploitation of this vulnerability allows for direct interaction with the database, including the possibility of stealing information.

Remediation

Users of the GymBase Theme Classes plugin should update to version 1.5 or later to address this vulnerability.