CVE-2022-1578

Name of the Vulnerable Software and Affected Versions My wpdb WordPress plugin versions prior to 2.5

Description The issue is related to a missing CSRF check when running SQL queries, which could allow an attacker to make a logged-in admin run an arbitrary SQL query via a CSRF attack.

Recommendations For versions prior to 2.5, update to version 2.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the SQL query functionality to minimize the risk of exploitation.