The All In One Redirection WordPress plugin before 2.2.0 does not properly sanitise and escape multiple parameters before using them in an SQL statement, leading to a SQL injection exploitable by high privilege users such as admin.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: WPScan
Published: 2023-07-10T12:40:10.450Z
Updated: 2024-08-02T06:26:09.150Z
Reserved: 2023-05-03T13:44:36.032Z
Link: CVE-2023-2493
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-07-10T16:15:51.120
Modified: 2023-11-07T04:12:45.970
Link: CVE-2023-2493
Redhat
No data.