CVE-2023-32508 WordPress Order Your Posts Manually Plugin <= 2.2.5 is vulnerable to SQL Injection

2023-11-0316:18:55

CWE-89

Patchstack

www.cve.org

cve-2023-32508

sql injection

wordpress

EPSS

0.001

Percentile

19.3%

JSON

Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in Rolf van Gelder Order Your Posts Manually allows SQL Injection.This issue affects Order Your Posts Manually: from n/a through 2.2.5.

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "order-your-posts-manually",
    "product": "Order Your Posts Manually",
    "vendor": "Rolf van Gelder",
    "versions": [
      {
        "lessThanOrEqual": "2.2.5",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/order-your-posts-manually/wordpress-order-your-posts-manually-plugin-2-2-5-sql-injection-vulnerability?_s_id=cve

EPSS

0.001

Percentile

19.3%

JSON

Related for CVELIST:CVE-2023-32508