title: Bestbooks <= 2.6.3 - Unauthenticated SQLi
description: The Bestbooks WordPress plugin through 2.6.3 does not sanitise and escape some parameters before using them in a SQL statement via an AJAX action, leading to an SQL Injection exploitable by unauthenticated users
problem types: CWE-89 SQL Injection
affected:
{
product: Bestbooks
vendor: Unknown
versions:
lessThanOrEqual: 2.6.3, status: affected, version: 2.6.3, versionType: custom
}