| Package | Affected versions | Patched versions |
|---|---|---|
| daily prayer time | < 2022.03.01 | 2022.03.01 |
The Daily Prayer Time WordPress plugin before 2022.03.01 does not sanitise and escape the month parameter before using it in a SQL statement via the get_monthly_timetable AJAX action (available to unauthenticated users), leading to an unauthenticated SQL injection
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free