Log out
Get PRO

Latest

Input validation vulnerability in Information Reel 10.0

  • Severity: high-risk
  • Status: Fixed
  • Publication: October 30, 2023

The Information Reel plugin for WordPress is prone to a security issue. This can be exploited by an attacker with subscriber-level or higher permissions. They can add extra SQL queries into existing queries, which can be used to access sensitive information from the database. This vulnerability affects versions 10.0 and earlier of the plugin, as the user supplied parameter has not been adequately escaped and the SQL query was not prepared properly.

Detected in:

Information Reel fixed vulnerable versions: >= * <= 10.0

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.