Input validation vulnerability in My auctions allegro 3.6.31

The My auctions allegro plugin for WordPress has a security vulnerability that allows attackers to access sensitive information from the website’s database. This is because the plugin does not properly protect against SQL Injection attacks, specifically through the ‘order’ parameter. The vulnerability exists in all versions up to and including 3.6.31. It is important to note that only authenticated attackers with Administrator-level access or higher can exploit this vulnerability.