Lucene search
PRIOn knowledge basePRION:CVE-2023-0487HistoryFeb 27, 2023 - 4:15 p.m.
Sql injection
2023-02-2716:15:00
PRIOn knowledge base
www.prio-n.com
6
wordpress
plugin
sql injection
risk
high privilege users
admin
0.001 Low
EPSS
Percentile
31.2%
The My Sticky Elements WordPress plugin before 2.0.9 does not properly sanitise and escape a parameter before using it in a SQL statement when deleting messages, leading to a SQL injection exploitable by high privilege users such as admin
| CPE | Name | Operator | Version |
|---|---|---|---|
| my_sticky_elements | lt | 2.0.9 |
Related
cve
cve
CVE-2023-0487
2023-02-27 16:15:12
cvelist
cvelist
CVE-2023-0487 My Sticky Elements < 2.0.9 - Admin+ SQLi
2023-02-27 15:24:39
nvd
nvd
CVE-2023-0487
2023-02-27 16:15:12
wordfence
wordfence