The Export Users With Meta WordPress plugin before 0.6.5 did not escape the list of roles to export before using them in a SQL statement in the export functionality, available to admins, leading to an authenticated SQL I…
CVSS 3.1HIGH 7.2·Network·High privileges·No interaction·EPSS 0.01416·Published 2021-07-06·Fixed in 0.6.5CWE-89