Kr0D

The plugin contains a missing authorization flaw within the `user filter()` function. This allows unauthenticated attackers to create administrative accounts.

The issue is related to a time-based SQL Injection vulnerability via the `post id` parameter. This vulnerability is caused by insufficient escaping on the user-supplied parameter and a lack of sufficient preparation on the existing SQL query. As a result, authenticated attackers with Administrator-level access and above can append additional SQL queries to existing queries, potentially extracting sensitive information from the database.

The issue is related to Reflected Cross-Site Scripting due to insufficient input sanitization and output escaping via the `wtab` parameter. This allows unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. The vulnerability affects WordPress installations with versions of PHP <=7.4.

The issue is a blind time-based SQL Injection vulnerability via the `br` parameter. This vulnerability is due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existing SQL query, making it possible for unauthenticated attackers to append additional SQL queries into already existing queries. This can be used to extract sensitive information from the database.