CVE-2022-4268

Name of the Vulnerable Software and Affected Versions Plugin Logic WordPress plugin versions prior to 1.0.8

Description The issue is related to a SQL injection that occurs because a parameter is not properly sanitised and escaped before being used in a SQL statement. This can be exploited by high privilege users, such as admins.

Recommendations For versions prior to 1.0.8, update to version 1.0.8 or later to resolve the issue. As a temporary workaround, consider restricting access to high privilege users until the update is applied.