CVE-2023-2921 in Short URL Pluginالمعلومات

الملخص

بحسب MITRE • 06/06/2025

The Short URL WordPress plugin through 1.6.8 does not properly sanitise and escape a parameter before using it in SQL statement, leading to a SQL injection exploitable by users with relatively low privilege on the site, like subscribers.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

مسؤول

WPScan

حجز

26/05/2023

إفشاء

06/06/2025

الاعتدال

تمت الموافقة

إدخال

VDB-311321

EPSS

0.00366

KEV

لا

النشاطات

منخفض جدًا

القطاع

Hostingprovider

المصادر

Do you know our Splunk app?

Download it now for free!