CVE-2023-0875

CWE-89 — SQL Injection3 documents3 sources
Severity
8.8HIGH
EPSS
0.7%
top 28.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Unknown WP Meta SEOJoomunited WP Meta SEO
Timeline
PublishedMar 20

Description

The WP Meta SEO WordPress plugin before 4.5.3 does not properly sanitize and escape inputs into SQL queries, leading to a blind SQL Injection vulnerability that can be exploited by subscriber+ users.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5unknown/wp_meta_seo< 4.5.3

🔴Vulnerability Details

2
CVEList
WP Meta SEO < 4.5.3 - Subscriber+ SQLi↗2023-03-20
▶
GHSA
GHSA-8j54-jp96-7993: The WP Meta SEO WordPress plugin before 4↗2023-03-20
▶
CVE-2023-0875 (HIGH CVSS 8.8) | The WP Meta SEO WordPress plugin be | cvebase.io