Input validation vulnerability in WPLMS Learning Management System for WordPress, WordPress LMS 1.9.9.5.3

The WPLMS plugin for WordPress has a security issue that makes it vulnerable to a type of cyber attack called SQL Injection. This can happen in versions up to 1.9.9.5.3 because the plugin does not have enough protection in place to prevent malicious code from being added to the database. As a result, attackers who have instructor-level access or higher can add their own code to existing queries and potentially access sensitive information.