title: Better Search and Replace < 1.4.1 - Admin+ SQLi
description: The Better Search Replace WordPress plugin before 1.4.1 does not properly sanitise and escape table data before inserting it into a SQL query, which could allow high privilege users to perform SQL Injection attacks
problem types: CWE-89 SQL Injection
affected:
{
product: Better Search Replace
vendor: Unknown
versions:
lessThan: 1.4.1, status: affected, version: 1.4.1, versionType: custom
}