some loser tried to hack my blog with this code...

cat=%2527+UNION+SELECT+CONCAT(666,CHAR(58),user_pass,CHAR(58),666,CHAR(58))+FROM+wp_users+where+id=1/*

 

and they attached it to the end of my url what did it do?

try it and see lol!

 

Looks like they're trying to fetch the admin password?

yup there went for the admin password if succesfull exploitation then they would of got the admin username and password hash then the wld try to crack the hash unless its paintext password which i dout change your password update your site software and ur sorted

 

silly milworm noobs tbh

Change your admin password just to make sure.