CVE-2023-0329

🗓️ 30 May 2023 07:49:13Reported by WPScanType

cve🔗 web.nvd.nist.gov👁 1066 Views🌐 WEB

The Elementor Website Builder WordPress plugin before 3.12.2 SQL injection vulnerabilit

Reporter	Title	Published	Views	Family All 17
0day.today	Elementor Website Builder < 3.12.2 SQL injection Exploit	14 Nov 202300:00	–	zdt
CNNVD	WordPress plugin Elementor Website Builder SQL注入漏洞	30 May 202300:00	–	cnnvd
Cvelist	CVE-2023-0329 Elementor Website Builder < 3.12.2 - Admin+ SQLi	30 May 202307:49	–	cvelist
Exploit DB	Elementor Website Builder < 3.12.2 - Admin+ SQLi	2 Apr 202400:00	–	exploitdb
EUVD	EUVD-2023-12390	3 Oct 202520:07	–	euvd
NVD	CVE-2023-0329	30 May 202308:15	–	nvd
OpenVAS	WordPress Elementor Website Builder Plugin < 3.12.2 SQLi Vulnerability	2 Jun 202300:00	–	openvas
OSV	CVE-2023-0329	30 May 202308:15	–	osv
Packet Storm	Elementor Website Builder SQL Injection	13 Nov 202300:00	–	packetstorm
Packet Storm	Elementor Website Builder SQL Injection	2 Apr 202400:00	–	packetstorm

NVD

Vulners

Node

elementor website_builderRange<3.12.2wordpress

[
  {
    "vendor": "Unknown",
    "product": "Elementor Website Builder",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "3.12.2"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/175639/Elementor-Website-Builder-SQL-Injection.html
wpscan	www.wpscan.com/vulnerability/a875836d-77f4-4306-b275-2b60efff1493

Parameter	Position	Path	Description	CWE
first_field	path	/	SQL injection via unsanitized Replace URL parameter in Elementor Tools module	CWE-89
second_field	path	/	SQL injection via unsanitized Replace URL parameter in Elementor Tools module	CWE-89

17 Jun 2026 05:25Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.2

EPSS0.19695