CVE-2023-2921

creationtimestamp| type| source ---|---|--- 2025-06-06 08:48:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqwh7jxxmp2o...

CVE-2023-2921

The Short URL WordPress plugin through 1.6.8 does not properly sanitise and escape a parameter before using it in SQL statement, leading to a SQL injection exploitable by users with relatively low privilege on the site, like subscribers...

CVE-2023-2921

The Short URL WordPress plugin through 1.6.8 does not properly sanitise and escape a parameter before using it in SQL statement, leading to a SQL injection exploitable by users with relatively low privilege on the site, like subscribers...

CVE-2023-2921 Short URL <= 1.6.8 - Subscriber+ SQLi

The Short URL WordPress plugin through 1.6.8 does not properly sanitise and escape a parameter before using it in SQL statement, leading to a SQL injection exploitable by users with relatively low privilege on the site, like subscribers...

CVE-2023-2921

The Short URL WordPress plugin (versions 1.6.8 and earlier ) is vulnerable to SQL injection because it fails to properly sanitize and escape a parameter used in a SQL statement. This flaw allows users with relatively low privileges, such as subscribers , to perform SQL injection attacks. To remed...