Description (CNA)
The "WP Search Filters" widget of The Plus Addons for Elementor - Pro WordPress plugin before 5.0.7 does not sanitise and escape the option parameter before using it in a SQL statement, which could lead to SQL injection
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unknown / The Plus Addons for Elementor - Pro | affected 5.0.4 before 5.0.4*; affected 5.0.7 before 5.0.7 |
CWE
CWE-89
References
- https://roadmap.theplusaddons.com/updates
- https://wpscan.com/vulnerability/9d7f8ba8-a5d5-4ec3-a48f-5cd4b115e8d5
ADP enrichment
No English description supplied.