WordPress Plugin Ajax Category Dropdown Cross-Site Scripting and SQL Injection Vulnerabilities

WordPress Plugin Ajax Category Dropdown is prone to multiple SQL injection vulnerabilities and a cross-site scripting vulnerability. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials compromise the application access or modify data or exploit latent vulnerabilities in the underlying database. WordPress Plugin Ajax Category Dropdown version 0.1.5 is vulnerable other versions may also be affected.