title: WP Cookie User Info < 1.0.9 - Admin+ SQL Injection
description: The Cookie Notification Plugin for WordPress plugin before 1.0.9 does not sanitise or escape the id GET parameter before using it in a SQL statement, when retrieving the setting to edit in the admin dashboard, leading to an authenticated SQL Injection
problem types: CWE-89 SQL Injection
affected:
{
product: Cookie Notification Plugin for WordPress – WP Cookie User Info
vendor: Unknown
versions:
lessThan: 1.0.9, status: affected, version: 1.0.9, versionType: custom
}