Input validation vulnerability in JS Archive List 6.1.5

The JS Archive List plugin, used on WordPress websites, has a security vulnerability. This means that hackers can use a technique called time-based SQL Injection to access sensitive information from the website’s database. This vulnerability exists in all versions of the plugin, up to and including version 6.1.5. It is caused by a lack of proper protection and preparation for the user-supplied parameter in the SQL query. This can potentially allow unauthorized users to add their own malicious SQL queries to the existing ones, and retrieve confidential data.