Lucene search
HistoryAug 16, 2023 - 12:15 p.m.
CVE-2023-0579
yarpp
wordpress
sql injection
cve-2023-0579
authentication
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.9
Confidence
High
EPSS
0.001
Percentile
31.8%
The YARPP WordPress plugin before 5.30.3 does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could allow any authenticated users, such as subscribers to perform SQL Injection attacks.
Affected configurations
Node
yarppyarppRange<5.30.3wordpress
Related
wpvulndb
wpvulndb
YARPP - Yet Another Related Posts Plugin < 5.30.3 - Subscriber+ SQLi
2023-04-25 00:00:00
openvas
openvas
WordPress YARPP Plugin < 5.30.3 SQLi Vulnerability
2023-08-17 00:00:00
cve
cve
CVE-2023-0579
2023-08-16 12:15:12
wpexploit
wpexploit
YARPP - Yet Another Related Posts Plugin < 5.30.3 - Subscriber+ SQLi
2023-04-25 00:00:00
cvelist
cvelist
prion
prion
Sql injection
2023-08-16 12:15:00
wordfence
wordfence
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.9
Confidence
High
EPSS
0.001
Percentile
31.8%
Related for NVD:CVE-2023-0579