cleantalk
Vulnerabilities and Security Researches

WC Fields Factory, c33ca94d41dac53b10a3d8bad757af32b989e289

Application

WC Fields Factory

Published on
Mar 29, 2023
Research Description
WC Fields Factory [wc-fields-factory] < 4.1.6 WordPress WC Fields Factory Plugin <= 4.1.5 is vulnerable to SQL Injection Update the WordPress WC Fields Factory plugin to the latest available version (at least 4.1.6). Unknown discovered and reported this SQL Injection vulnerability in WordPress WC Fields Factory Plugin. This could allow a malicious actor to directly interact with your database, including but not limited to stealing information. This vulnerability has been fixed in version 4.1.6.
Affected versions
max 4.1.6.
Status
vulnerable