User Login History for WordPress, up to version 1.7.0, has a vulnerability to SQL Injection. This means that an attacker with access to certain parts of the system can use the ‘orderby’ parameter to add extra parts to the existing SQL query. This additional code can be used to get sensitive information from the database.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
