The researcher, using the alias "c0de.breaker," used SQL injection to hijack the sites, according to Gunter Ollmann, VP of research at security firm Damballa.

A sophisticated and wide-ranging search engine optimization (SEO) campaign that uses SQL injections to attack targeted websites is making the rounds. According to Akamai Technologies’ Threat Research ...

This was a very bad sign, as it seemed the username was directly interpolated into the login SQL query. Sure enough, we had discovered SQL injection and were able to use sqlmap to confirm the ...

Today, the WPScan team from Automattic disclosed the details of an SQL injection vulnerability, tracked as CVE-2023-6063 and with a high-severity score of 8.6, impacting all versions of the plugin ...