CVE-2016-1000217

The Zotpress plugin for WordPress contains an SQL Injection vulnerability in the zp_get_account() function. An attacker can exploit this flaw to execute unauthorized queries against the database.

Exploitation of this vulnerability may lead to the disclosure of sensitive data or full compromise of the database. Organizations should be aware of the potential security risks to their data.

It is recommended to update the Zotpress plugin to the latest version to mitigate this vulnerability. Additionally, conducting a security audit of the application is advisable.