Lucene search
HistoryJan 16, 2024 - 4:15 p.m.
CVE-2023-3211
wordpress
database administrator
sql injection
ajax
unauthenticated users
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.004 Low
EPSS
Percentile
74.4%
The WordPress Database Administrator WordPress plugin through 1.0.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.
Affected configurations
Node
dmparekhwordpress_database_administratorRange≤1.0.3wordpress
Related
prion
prion
Sql injection
2024-01-16 16:15:00
cve
cve
CVE-2023-3211
2024-01-16 16:15:11
wpexploit
wpexploit
WordPress Database Administrator <= 1.0.3 - Unauthenticated SQL Injection
2023-07-24 00:00:00
wpvulndb
wpvulndb
WordPress Database Administrator <= 1.0.3 - Unauthenticated SQL Injection
2023-07-24 00:00:00
cvelist
cvelist
wordfence
wordfence
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.004 Low
EPSS
Percentile
74.4%
Related for NVD:CVE-2023-3211