CyberRota Analysis
AI-GeneratedThe Content Views WordPress plugin prior to version 4.5 is vulnerable to SQL injection due to inadequate capability checks on AJAX actions and insufficient data sanitization. This flaw allows any authenticated user, including those with minimal permissions like Subscribers, to execute arbitrary SQL queries, potentially compromising the database. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate the risk of exploitation.
Original NVD Description
The Content Views WordPress plugin before 4.5 does not perform a capability check on one of its AJAX actions and does not properly sanitise attacker-supplied data before using it in a SQL query, allowing any authenticated user, including Subscribers, to perform SQL injection attacks.