Solid Security – Password, Two Factor Authentication, and Brute Force Protection, CVE-2018-12636

CVE, Research URL: CVE-2018-12636
Home page URL: Security reports for Solid Security – Password, Two Factor Authentication, and Brute Force Protection
Application: Solid Security – Password, Two Factor Authentication, and Brute Force Protection
Published on: Jun 22, 2018
Research Description: The iThemes Security (better-wp-security) plugin before 7.0.3 for WordPress allows SQL Injection (by attackers with Admin privileges) via the logs page.
Affected versions: Min -, max 7.0.3.
Status: vulnerable