- Puts values from get_options() straight into SQL queries. Likely not exploitable due to magic quotes GPC emulation
This plugin has been given a short, targeted code review.
Before using this plugin, you should very carefully consider its potential problems and should conduct a thorough assessment. Read more about this recommendation.
The version of this plugin that this recommendation was based on is known to be vulnerable to attack:
This recommendation applies to version 5.0 of this plugin, but the most recent version is 5.3. These findings may no longer be correct.
Read more about our failure criteria.