Input validation vulnerability in Dr Affiliate 1.2.3

The plugin called Dr Affiliate for WordPress has a security issue that allows hackers to access sensitive information from the website’s database. This vulnerability exists in versions up to 1.2.3 and is caused by inadequate protection of user input and insufficient preparation of SQL queries. This means that even users with subscriber-level access or higher can inject their own SQL queries into existing ones, potentially stealing important data.

Detected in:

Dr Affiliate open vulnerable versions: >= * <= 1.2.3

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.