The Paid Memberships Pro WordPress plugin before 2.9.12 does not prevent subscribers from rendering shortcodes that concatenate attributes directly into an SQL query.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: WPScan
Published: 2023-03-20T15:52:10.755Z
Updated: 2024-08-02T05:17:50.223Z
Reserved: 2023-02-01T22:57:30.482Z
Link: CVE-2023-0631
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-03-20T16:15:12.437
Modified: 2024-11-21T07:37:31.107
Link: CVE-2023-0631
Redhat
No data.