title: Paytm - Donation Plugin <= 1.3.2 - Authenticated (admin+) SQL Injection
description: The Paytm – Donation Plugin WordPress plugin through 1.3.2 does not sanitise, validate or escape the id GET parameter before using it in a SQL statement when deleting donations, leading to an authenticated SQL injection issue
problem types: CWE-89 SQL Injection
affected:
{
product: Paytm – Donation Plugin
vendor: Unknown
versions:
lessThanOrEqual: 1.3.2, status: affected, version: 1.3.2, versionType: custom
}