CyberRota Analysis
AI-GeneratedThe Product Question and Answer WordPress plugin versions up to 1.1.0 are vulnerable to SQL injection due to insufficient sanitization and escaping of parameters in AJAX actions accessible to unauthenticated users. This flaw allows attackers to execute arbitrary SQL queries, potentially leading to the extraction of sensitive data from the database. WordPress site administrators using this plugin should prioritize immediate updates or mitigations to safeguard against potential data breaches.
Original NVD Description
The Product Question and Answer WordPress plugin through 1.1.0 does not sanitize and escape parameters before using them in SQL queries on AJAX actions available to unauthenticated users, allowing unauthenticated attackers to perform SQL injection attacks and extract sensitive data from the database.