CVE-2023-28662

🗓️ 22 Mar 2023 00:00:00Reported by tenableType

cve🔗 web.nvd.nist.gov👁 68 Views🌐 WEB

The Gift Cards WordPress Plugin v4.3.1 unauthenticated SQL injectio

Reporter	Title	Published	Views	Family All 15
Circl	CVE-2023-28662	22 Mar 202323:36	–	circl
CNNVD	WordPress Plugin Gift Cards SQL注入漏洞	22 Mar 202300:00	–	cnnvd
Cvelist	CVE-2023-28662	22 Mar 202300:00	–	cvelist
Nuclei	Wordpress Gift Cards <= 4.3.1 - SQL Injection	6 Jun 202603:01	–	nuclei
NVD	CVE-2023-28662	22 Mar 202321:15	–	nvd
OpenVAS	WordPress Gift Cards Plugin < 4.3.3 SQLi Vulnerability	12 Oct 202300:00	–	openvas
Patchstack	WordPress Gift Vouchers Plugin <= 4.3.2 is vulnerable to SQL Injection	30 Mar 202300:00	–	patchstack
Prion	Sql injection	22 Mar 202321:15	–	prion
Positive Technologies	PT-2023-21884 · WordPress · The Gift Cards (Gift Vouchers/Packages) Wordpress Plugin	22 Mar 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-28662	23 May 202503:37	–	redhatcve

NVD

Node

codemenschen gift_vouchersRange≤4.3.1wordpress

[
  {
    "vendor": "n/a",
    "product": "Gift Cards (Gift Vouchers and Packages) WordPress Plugin",
    "versions": [
      {
        "version": "<= 4.3.1",
        "status": "affected"
      }
    ]
  }
]

Source	Link
tenable	www.tenable.com/security/research/tra-2023-2

Parameter	Position	Path	Description	CWE
template	request body	/wp-admin/admin-ajax.php	Unauthenticated SQL injection vulnerability in the template parameter via the wpgv_doajax_voucher_pdf_save_func AJAX action.	CWE-89

25 Feb 2025 21:15Current

9.8High risk

Vulners AI Score9.8

CVSS 3.19.8

EPSS0.74254

SSVC

CWE-89