WP ERP Pro SQL Injection Vulnerability

A SQL injection vulnerability has been identified in the WP ERP Pro plugin for WordPress, affecting all versions up to and including 1.5.1. The vulnerability arises from inadequate escaping of the 'search_key' parameter, allowing unauthenticated attackers to inject additional SQL queries. This exploitation could lead to the extraction of sensitive information from the database.

Impact

Exploitation of this vulnerability allows for SQL injection, where attackers can manipulate database queries to access or modify sensitive information.

Remediation

No known patch is available. Users are advised to review the vulnerability details and consider uninstalling the affected plugin.