CVE-2023-49776

The CVE-2023-49776 entry documents an SQL Injection vulnerability in the WordPress plugin Sayfa Sayaç (Sayfa Sayac) version up to 2.6. The root cause is improper neutralization of special elements in SQL commands, due to insufficient escaping of user-supplied input and lack of proper preparation ...

CVE-2023-49778

The CVE-2023-49778 entry corresponds to a deserialization of untrusted data vulnerability in the WordPress Sayfa Sayac plugin (Sayfa Sayaç) affecting versions up to 2.6. Connected sources indicate this is an unauthenticated PHP Object Injection vulnerability with a critical impact; there is no pu...