Log out
Get PRO

Latest

Input validation vulnerability in TagGator 1.33

  • Severity: critical
  • Status: Open
  • Publication: April 5, 2012

The TagGator plugin for WordPress is a security risk. Versions of this plugin up to and including 1.31 are vulnerable to a type of attack called generic SQL Injection. This happens when additional, malicious SQL code is added to an existing query, allowing someone without permission to extract sensitive information from the database. This is due to a lack of escaping the user supplied parameter and insufficient preparation of the existing SQL query.

Detected in:

TagGator open vulnerable versions: >= * < 1.33

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.