CyberRota Analysis
AI-GeneratedThe wp shortcut link and advertisement banner plugin for WordPress versions up to 1.2.0 is vulnerable to SQL injection due to improper sanitization of a parameter in an AJAX action accessible to unauthenticated users. This flaw allows attackers to execute arbitrary SQL queries, potentially leading to the extraction of sensitive data from the database. WordPress site administrators using this plugin should prioritize immediate updates to mitigate the risk of exploitation.
Original NVD Description
The wp shortcut link and advertisement baner WordPress plugin through 1.2.0 does not sanitize and escape a parameter before using it in a SQL query on an AJAX action available to unauthenticated users, allowing unauthenticated attackers to perform SQL injection attacks and extract sensitive data from the database.