The SiteGround Security WordPress plugin before 1.3.1 does not properly sanitize user input before using it in an SQL query, leading to an authenticated SQL injection issue.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Siteground_security | Siteground | * | 1.3.1 (excluding) |
References
- https://github.com/namah-age/CVEs/blob/master/1.md
- https://wpscan.com/vulnerability/acf3e369-1290-4b3f-83bf-2209b9dd06e1
- https://www.siteground.com/viewtos/responsible_disclosure_policy?scid=4\u0026lang=en
- https://github.com/namah-age/CVEs/blob/master/1.md
- https://wpscan.com/vulnerability/acf3e369-1290-4b3f-83bf-2209b9dd06e1
- https://www.siteground.com/viewtos/responsible_disclosure_policy?scid=4\u0026lang=en