WordPress WP Attractive Donations System SQL Injection Vulnerability

A blind SQL injection vulnerability has been identified in the WordPress plugin WP Attractive Donations System - Easy Stripe & Paypal Donations, affecting versions through 1.25. This vulnerability arises from improper neutralization of special elements used in SQL commands, allowing malicious actors to interact with the database in unauthorized ways.

Impact

Exploitation of this vulnerability could lead to unauthorized database access, allowing attackers to manipulate or extract data.

Remediation

Users are advised to update to the latest version of the WP Attractive Donations System - Easy Stripe & Paypal Donations plugin. For those using Patchstack, a mitigation rule has been issued to block attacks until an official patch is available.