CyberRota Analysis
AI-GeneratedThe Tz Weekly Radio Schedule WordPress plugin versions up to 1.8.1 are vulnerable to SQL injection due to inadequate sanitization and escaping of parameters in an AJAX action accessible to unauthenticated users. This flaw allows attackers to execute arbitrary SQL queries, potentially leading to the extraction of sensitive data from the database. WordPress site administrators using this plugin should prioritize immediate updates or mitigations to safeguard against potential data breaches.
Original NVD Description
The Tz Weekly Radio Schedule WordPress plugin through 1.8.1 does not sanitize and escape a parameter before using it to build a SQL query on an AJAX action available to unauthenticated users, allowing unauthenticated attackers to perform SQL injection attacks and extract sensitive data from the database.