Lucene search
HistoryOct 12, 2023 - 12:15 p.m.
CVE-2023-23651
sql injection
mainwp google analytics extension
cve-2023-23651
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
9
Confidence
High
EPSS
0.001
Percentile
25.6%
Auth. (subscriber+) SQL Injection (SQLi) vulnerability in MainWP Google Analytics Extension plugin <= 4.0.4 versions.
Affected configurations
Node
mainwpmainwp_google_analytics_extensionRange≤4.0.4wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mainwp | mainwp_google_analytics_extension | * | cpe:2.3:a:mainwp:mainwp_google_analytics_extension:*:*:*:*:*:wordpress:*:* |
Related
vulnrichment
vulnrichment
cvelist
cvelist
cve
cve
CVE-2023-23651
2023-10-12 12:15:10
prion
prion
Sql injection
2023-10-12 12:15:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
9
Confidence
High
EPSS
0.001
Percentile
25.6%
Related for NVD:CVE-2023-23651