Input validation vulnerability in Vimeotheque: Vimeo WordPress Plugin 2.3.4.2

The Vimeotheque plugin for WordPress has a security issue called SQL Injection that affects versions up to 2.3.4.2. This is because the plugin does not properly protect against user input and does not adequately prepare the SQL query. This means that attackers who are logged in with contributor or higher access can add their own SQL queries to extract sensitive information from the database.

Detected in:

Vimeotheque: Vimeo WordPress Plugin fixed vulnerable versions: >= * <= 2.3.4.2

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.