Lukas Kinneberg

**Name of the Vulnerable Software and Affected Versions** AN GradeBook WordPress plugin versions 5.0.1 and earlier **Description** The issue arises from the plugin's failure to properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection. This can be exploited by users with a role as low as subscriber. **Recommendations** For AN GradeBook WordPress plugin versions 5.0.1 and earlier, update to a version that properly sanitises and escapes parameters used in SQL statements to prevent SQL injection. As a temporary workaround, consider restricting the role of subscribers to prevent exploitation until a patch is available.