Input validation vulnerability in WordPress Custom Sidebar 2.3

The WordPress Custom Sidebar plugin is at risk of being hacked through a method called SQL Injection. This can happen in versions up to 2.3 because the plugin does not properly protect against user input and does not properly prepare for database queries. This means that someone with contributor-level access or higher can add their own queries to the existing ones and potentially access sensitive information from the database.

Detected in:

WordPress Custom Sidebar open vulnerable versions: >= * <= 2.3

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.