pentester.land· Jan 18, 2022· by ngocnb, khuyenn🔍 CVE-2022-21661

CVE-2022-21661: Exposing Database Info Via Wordpress SQL Injection

Open Original Article ↗
Target Program: WordPress
🎯 Vulnerability: SQL Injection (SQLi)
💡 Defense Fix: Use Parameterized Prepared Statements (ORM) for all database queries and disable verbose error messages.
#SQL injection#CVE-2022-21661