Lucene search
PRIOn knowledge basePRION:CVE-2023-2492HistoryJun 19, 2023 - 11:15 a.m.
Sql injection
2023-06-1911:15:00
PRIOn knowledge base
www.prio-n.com
4
sql injection
wordpress
querywall
security vulnerability
parameter sanitization
0.001 Low
EPSS
Percentile
28.6%
The QueryWall: Plug’n Play Firewall WordPress plugin through 1.1.1 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin.
| CPE | Name | Operator | Version |
|---|---|---|---|
| querywall_plug\\'n_play_firewall | le | 1.1.1 |
Related
nvd
nvd
CVE-2023-2492
2023-06-19 11:15:10
cve
cve
CVE-2023-2492
2023-06-19 11:15:10
wpvulndb
wpvulndb
QueryWall: Plug'n Play Firewall <= 1.1.1 - Admin+ SQLi
2023-05-26 00:00:00
cvelist
cvelist
CVE-2023-2492 QueryWall: Plug'n Play Firewall <= 1.1.1 - Admin+ SQLi
2023-06-19 10:52:44
wpexploit
wpexploit
QueryWall: Plug'n Play Firewall <= 1.1.1 - Admin+ SQLi
2023-05-26 00:00:00
wordfence
wordfence