CyberRota Analysis
AI-GeneratedThe Tz Weekly Radio Schedule WordPress plugin, up to version 1.8.1, is vulnerable to SQL injection due to insufficient sanitization of a parameter used in an AJAX action accessible to unauthenticated users. This flaw allows attackers to execute arbitrary SQL queries, potentially leading to unauthorized access to sensitive database information. WordPress site administrators using this plugin should prioritize immediate updates or mitigations to protect against potential data breaches.
Original NVD Description
The Tz Weekly Radio Schedule WordPress plugin through 1.8.1 does not sanitize and escape a parameter before using it to build a SQL query on an AJAX action available to unauthenticated users, allowing unauthenticated attackers to perform SQL injection attacks and extract sensitive data from the database.