Blappsta Mobile App Plugin SQL Injection Vulnerability
Vulnerability
A SQL injection vulnerability has been identified in the Blappsta Mobile App Plugin for WordPress, affecting all versions through 0.8.8.8. The issue arises in the nh_ynaa_comments() function, where insufficient escaping of user-supplied parameters and inadequate preparation of the SQL query allow unauthenticated attackers to inject additional SQL commands. This exploitation could lead to the extraction of sensitive information from the database.
Impact
Exploitation of this vulnerability allows for SQL injection, enabling attackers to manipulate database queries and potentially access or extract sensitive information from the database.
Remediation
No known patch is available. Users are advised to review the vulnerability details and consider uninstalling the affected plugin.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.