Description
SQL injection (SQLi) refers to an injection attack wherein an attacker can execute malicious SQL statements that control a web application's database server.
Remediation
Use parameterized queries when dealing with SQL queries that contain user input. Parameterized queries allow the database to understand which parts of the SQL query should be considered as user input, therefore solving SQL injection.
References
Prevent SQL injection vulnerabilities in PHP applications and fix them
Related Vulnerabilities
WordPress Plugin WP-Predict 'predictId' Parameter Blind SQL Injection (1.0)
WordPress Plugin Pierre's Wordspew 'wordspew.php' Multiple SQL Injection Vulnerabilities (5.61)
WordPress Plugin Quiz and Survey Master (QSM)-Easy Quiz and Survey Maker SQL Injection (7.3.4)
WordPress Plugin Double Opt-In for Download SQL Injection (2.0.9)
WordPress Plugin Secure Copy Content Protection and Content Locking SQL Injection (2.6.6)