Ads Pro Plugin WordPress Advertising Manager SQL Injection Vulnerability

A time-based SQL injection vulnerability has been identified in the Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager, affecting all versions through 4.95. The vulnerability arises from inadequate escaping of the 'site_id' parameter, allowing unauthenticated attackers to inject additional SQL queries. This exploitation could lead to the extraction of sensitive information from the database.

Impact

Exploitation of this vulnerability allows for time-based SQL injection, where an attacker can manipulate SQL queries to extract sensitive data from the database.

Remediation

There is no known patch available for this vulnerability. Users are advised to review the vulnerability details and consider uninstalling the affected plugin.