Lucene search
WPScanCVELIST:CVE-2023-0388HistoryApr 24, 2023 - 6:30 p.m.
CVE-2023-0388 Random Text <= 0.3.0 - Subscriber+ SQLi
2023-04-2418:30:54
WPScan
www.cve.org
4
cve-2023-0388
random text
wordpress
sql injection
sqli
subscriber
EPSS
0.001
Percentile
28.5%
The Random Text WordPress plugin through 0.3.0 does not properly sanitize and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by any authenticated users, such as subscribers.
CNA Affected
[
{
"vendor": "Unknown",
"product": "Random Text",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThanOrEqual": "0.3.0"
}
],
"defaultStatus": "affected",
"collectionURL": "https://wordpress.org/plugins"
}
]Related
prion
prion
Sql injection
2023-04-24 19:15:00
cve
cve
CVE-2023-0388
2023-04-24 19:15:08
wpvulndb
wpvulndb
Random Text <= 0.3.0 - Subscriber+ SQLi
2023-04-03 00:00:00
wpexploit
wpexploit
Random Text <= 0.3.0 - Subscriber+ SQLi
2023-04-03 00:00:00
nvd
nvd
CVE-2023-0388
2023-04-24 19:15:08
wordfence
wordfence