WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. WordPress WP Contacts Manager is vulnerable to a SQL injection vulnerability, which stems from not properly handling user-supplied POST data and can be exploited by attackers to cause SQL injection attacks.