The YARPP WordPress plugin before 5.30.3 does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could allow any authenticated users, such as subscribers to perform SQL Injection attacks.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: WPScan
Published: 2023-08-16T11:03:21.175Z
Updated: 2024-08-02T05:17:49.906Z
Reserved: 2023-01-30T11:13:36.310Z
Link: CVE-2023-0579
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-08-16T12:15:12.233
Modified: 2023-11-07T04:00:52.513
Link: CVE-2023-0579
Redhat
No data.