CVE-2023-28748 WordPress Copy Or Move Comments Plugin <= 5.0.4 is vulnerable to SQL Injection

2023-11-0608:27:53

CWE-89

Patchstack

github.com

wordpress

sql injection

plugin

vulnerability

copy or move comments

AI Score

Confidence

Low

SSVC

Exploitation

none

Automatable

yes

Technical Impact

total

JSON

Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in biztechc Copy or Move Comments allows SQL Injection.This issue affects Copy or Move Comments: from n/a through 5.0.4.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:appjetty:copy_or_move_comments:*:*:*:*:*:wordpress:*:*"
    ],
    "vendor": "appjetty",
    "product": "copy_or_move_comments",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "5.0.4"
      }
    ],
    "defaultStatus": "unaffected"
  }
]