title: Video Embed <= 1.0 - Authenticated (subscriber+) SQL Injection
description: The id GET parameter of one of the Video Embed WordPress plugin through 1.0's page (available via forced browsing) is not sanitised, validated or escaped before being used in a SQL statement, allowing low privilege users, such as subscribers, to perform SQL injection.
problem types: CWE-89 SQL Injection
affected:
{
product: Video Embed
vendor: Unknown
versions:
lessThanOrEqual: 1.0, status: affected, version: 1.0, versionType: custom
}