Input validation vulnerability in FAQ Builder AYS 1.3.5

The FAQ Builder AYS WordPress plugin before version 1.3.6 had a security vulnerability that allowed hackers to gain access to the admin dashboard by exploiting the get_faqs() function. This function did not check or verify the orderby parameter before using it in SQL statements

Detected in:

FAQ Builder AYS fixed vulnerable versions: >= * <= 1.3.5

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.