WordPress AIKit Plugin <= 4.14.1 is vulnerable to SQL Injection

Low priority No impactful threat
<= 4.14.1Vulnerable version(s)
No official fix availableFixed version
9 Apr, 2024 by Patchstack

Get the fastest vulnerability mitigation with Patchstack!

Get started

Risks

CVSS 8.5

8.5

SQL Injection

This could allow a malicious actor to directly interact with your database, including but not limited to stealing information.

CVSS score is a way to evaluate and rank reported vulnerabilities in a standardized and repeatable way but which is not ideal for WordPress.

Solutions

This security issue has a low severity impact and is unlikely to be exploited.

Details

Have additional information or questions about this entry? Let us know.

Timeline

Reported byProfile ImageIvan Spiridonov

9 Jan, 2024

Early warning sent out to Patchstack customers

9 Apr, 2024

Published by Patchstack

9 Apr, 2024

Weekly WordPress security intelligence delivered to your inbox.