{"id":7999270,"date":"2015-08-24T13:15:55","date_gmt":"2015-08-24T13:15:55","guid":{"rendered":"https:\/\/wordpress.org\/support\/topic\/sql-injection-19\/"},"modified":"2017-02-08T13:44:55","modified_gmt":"2017-02-08T13:44:55","slug":"sql-injection-19","status":"publish","type":"topic","link":"https:\/\/wordpress.org\/support\/topic\/sql-injection-19\/","title":{"rendered":"SQL-injection"},"content":{"rendered":"<p>This plugin has a SQL-injection vulnerability in at least Filter.php appendWhere -function. Date range $_GET[] are not being sanitized and are appended with through posts_where filter.<\/p>\n","protected":false},"template":"","class_list":["post-7999270","topic","type-topic","status-publish","hentry"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/7999270","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":1,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/7999270\/revisions"}],"predecessor-version":[{"id":8779626,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/7999270\/revisions\/8779626"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/media?parent=7999270"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}