title: All In One Redirection < 2.2.0 - Admin+ SQLi
description: The All In One Redirection WordPress plugin before 2.2.0 does not properly sanitise and escape multiple parameters before using them in an SQL statement, leading to a SQL injection exploitable by high privilege users such as admin.
problem types: CWE-89 SQL Injection
affected:
{
vendor: Unknown
product: All In One Redirection
versions:
status: affected, versionType: custom, version: 0, lessThan: 2.2.0
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
}