2024-01-16 15:50:50
WPScan
PUBLISHED
The plugin does not filter the "delete_entries" parameter from user requests, leading to an SQL Injection vulnerability.