Wordpress Alert: SQL injection in reporting dashboards

Report filters become part of an unsafe SQL query. Sensitive records may be exposed or reports altered.

Switchboard Tech Services

Wordpress Alert: SQL injection in reporting dashboards

What it looks like

Report filters become part of an unsafe SQL query.

Why it matters

Sensitive records may be exposed or reports altered.

What to check

Review report plugins for security advisories and prepared queries.

Documentation

This is an exploit pattern to check in installed components, not a claim that every WordPress site has this flaw. Confirm the product and version against its advisories before treating a site as affected. See OWASP SQL injection prevention.