| Package | Affected versions | Patched versions |
|---|---|---|
| website file changes monitor | < 1.8.3 | 1.8.3 |
The Website File Changes Monitor WordPress plugin before 1.8.3 does not sanitise and escape user input before using it in a SQL statement via an action available to users with the manage_options capability (by default admins), leading to an SQL injection
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free