~/products/swit/wp_sessions_time_monitoring_full_automatic

pipeline liveDigest Docs

Swit Wp Sessions Time Monitoring Full Automatic vulnerabilities

1 known vulnerability affecting swit/wp_sessions_time_monitoring_full_automatic.

Total CVEs

1

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

SortPage 1 of 1

CVE-2023-5203P2HIGHCVSS 7.5PoCfixed in 1.0.92023-12-26

CVE-2023-5203 [HIGH] CWE-89 CVE-2023-5203: The WP Sessions Time Monitoring Full Automatic WordPress plugin before 1.0.9 does not sanitize the r The WP Sessions Time Monitoring Full Automatic WordPress plugin before 1.0.9 does not sanitize the request URL or query parameters before using them in an SQL query, allowing unauthenticated attackers to extract sensitive data from the database via blind time based SQL injection techniques, or in some cases an error/union based technique.

Swit Wp Sessions Time Monitoring Full Automatic vulnerabilities | cvebase