Eagle-Themes Eagle Booking SQL Injection Vulnerability
Vulnerability
A SQL injection vulnerability has been identified in the WordPress plugin Eagle Booking, affecting versions through 1.3.4.3. This vulnerability allows for improper neutralization of special elements used in SQL commands, enabling malicious actors to manipulate database queries.
Impact
Exploitation of this vulnerability allows for direct interaction with the database, potentially leading to unauthorized data access or manipulation.
Remediation
Users are advised to update to a version of the Eagle Booking plugin that is not vulnerable to SQL injection. Patchstack has issued a mitigation rule to block attacks until an official patch is available.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.