The Recipe Card Blocks Lite WordPress plugin before version 3.4.13 is vulnerable to SQL injection. The plugin does not properly sanitize a parameter before using it in a SQL statement, allowing authenticated users with contributor privileges or higher to potentially execute arbitrary SQL commands.
The Recipe Card Blocks Lite WordPress plugin before 3.4.13 does not sanitize and escape a parameter before using it in a SQL statement, allowing contributors and above to perform SQL injection attacks.