2 matches found
CVE-2023-23488: Improper Neutralization of Special Elements used in an SQL Command
The Paid Memberships Pro WordPress Plugin, version 2.9.8, is affected by an unauthenticated SQL injection vulnerability in the 'code' parameter of the '/pmpro/v1/order' REST route...
9.8CVSS5.9AI score0.9246EPSS
SaveExploits6References3
VulnCheck KEV: CVE-2023-23488
The Paid Memberships Pro WordPress Plugin, version 2.9.8, is affected by an unauthenticated SQL injection vulnerability in the 'code' parameter of the '/pmpro/v1/order' REST route...
9.8CVSS8AI score0.9246EPSS
SaveIn wildExploits6References3
20