Product
An unauthenticated SQL injection vulnerability in the Transliterator WordPress plugin allows attackers to extract arbitrary database content via the name query parameter using double percent-encoded payloads.