| Package | Affected versions | Patched versions |
|---|---|---|
| complianz | < 6.3.4< 6.3.6 | 6.3.46.3.6 |
The Complianz WordPress plugin before 6.3.4, and Complianz Premium WordPress plugin before 6.3.6 allow a translators to inject arbitrary SQL through an unsanitized translation. SQL can be injected through an infected translation file, or by a user with a translator role through translation plugins such as Loco Translate or WPML.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free