CVE-2023-2636

🗓️ 17 Jul 2023 13:29:51Reported by WPScanType

cve🔗 web.nvd.nist.gov👁 80 Views🌐 WEB

AN_GradeBook WordPress plugin SQL injection vulnerabilit

Reporter	Title	Published	Views	Family All 15
0day.today	WordPress AN_Gradebook 5.0.1 Plugin - SQL injection Vulnerability	28 Jul 202300:00	–	zdt
Circl	CVE-2023-2636	28 Jul 202300:00	–	circl
CNNVD	WordPress plugin AN_GradeBook SQL注入漏洞	17 Jul 202300:00	–	cnnvd
Cvelist	CVE-2023-2636 AN_GradeBook <= 5.0.1 - Subscriber+ SQLi	17 Jul 202313:29	–	cvelist
Exploit DB	WordPress Plugin AN_Gradebook 5.0.1 - SQLi	28 Jul 202300:00	–	exploitdb
EUVD	EUVD-2023-34102	3 Oct 202520:07	–	euvd
NVD	CVE-2023-2636	17 Jul 202314:15	–	nvd
Packet Storm	WordPress AN_Gradebook 5.0.1 SQL Injection	31 Jul 202300:00	–	packetstorm
Patchstack	WordPress AN_GradeBook Plugin <= 5.0.1 is vulnerable to SQL Injection	26 Jun 202300:00	–	patchstack
Prion	Sql injection	17 Jul 202314:15	–	prion

NVD

Vulners

Node

an_gradebook_project an_gradebookRange≤5.0.1wordpress

[
  {
    "vendor": "Unknown",
    "product": "AN_GradeBook",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThanOrEqual": "5.0.1"
      }
    ],
    "defaultStatus": "affected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/6a3bfd88-1251-4d40-b26f-62950a3ce0b5
packetstormsecurity	www.packetstormsecurity.com/files/173815/WordPress-AN_Gradebook-5.0.1-SQL-Injection.html

Parameter	Position	Path	Description	CWE
id	query param	wp-admin/admin-ajax.php	SQL injection vulnerability demonstrated via the id parameter in admin-ajax.php with a crafted value.	CWE-89

17 Jun 2026 05:53Current

8.9High risk

Vulners AI Score8.9

CVSS 3.18.8

EPSS0.03246

SSVC

CWE-89