| Package | Affected versions | Patched versions |
|---|---|---|
| wpml | ≤ 3.1.8 |
SQL injection vulnerability in the WPML plugin before 3.1.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the lang parameter in the HTTP Referer header in a wp-link-ajax action to comments/feed.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free