CVE-2023-5437

The CVE-2023-5437 issue affects the WP fade in text news WordPress plugin. It is a SQL Injection via the plugin shortcode due to insufficient escaping of user-supplied input and inadequate query preparation, enabling authenticated attackers with subscriber-level permissions (or higher) to append ...