CVE-2023-28663

🗓️ 22 Mar 2023 00:00:00Reported by tenableType

cve🔗 web.nvd.nist.gov👁 46 Views🌐 WEB

The Formidable PRO2PDF WordPress Plugin, version < 3.11, is affected by an authenticated SQL injection vulnerability in the ‘fieldmap’ parameter

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2023-28663	22 Mar 202323:36	–	circl
CNNVD	WordPress Plugin Formidable PRO2PDF SQL注入漏洞	22 Mar 202300:00	–	cnnvd
Cvelist	CVE-2023-28663	22 Mar 202300:00	–	cvelist
EUVD	EUVD-2023-32324	3 Oct 202520:07	–	euvd
NVD	CVE-2023-28663	22 Mar 202321:15	–	nvd
OpenVAS	WordPress Formidable PRO2PDF Plugin < 3.10 SQLi Vulnerability	12 Sep 202300:00	–	openvas
OSV	CVE-2023-28663	22 Mar 202321:15	–	osv
Prion	Sql injection	22 Mar 202321:15	–	prion
Positive Technologies	PT-2023-21885 · WordPress · Formidable Pro2Pdf Wordpress Plugin	22 Mar 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-28663	23 May 202503:37	–	redhatcve

NVD

Node

formidablepro2pdf formidable_pro2pdfRange<3.11wordpress

[
  {
    "vendor": "n/a",
    "product": "Formidable PRO2PDF WordPress Plugin",
    "versions": [
      {
        "version": "< 3.11",
        "status": "affected"
      }
    ]
  }
]

Source	Link
tenable	www.tenable.com/security/research/tra-2023-2

Parameter	Position	Path	Description	CWE
fieldmap	request body	wp-admin/admin-ajax.php	Authenticated SQL injection via unsanitised fieldmap parameter in fpropdf_export_file action (CVE-2023-28663)	CWE-89
action	request body	wp-admin/admin-ajax.php	Authenticated SQL injection via unsanitised fieldmap parameter in fpropdf_export_file action (CVE-2023-28663)	CWE-89

25 Feb 2025 21:15Current

8.8High risk

Vulners AI Score8.8

CVSS 3.18.8

EPSS0.00804

SSVC

CWE-89