Yawave WordPress Plugin – Unauthenticated SQL Injection in versions <= 2.9.1
Last year, Atvik Security was performing security reviews on various WordPress plugins. WordPress plugins’ source code is freely available, and can be found in the “Development” tab when viewing a WordPress plugin. When reviewing the Yawave wordpress plugin we found a completely unauthenticated SQL injection vulnerability. At the time of writing, the source code is […]
Yawave WordPress Plugin – Unauthenticated SQL Injection in versions <= 2.9.1 Read More »