CVE-2023-5640
N/A
N/A
Summary
The Article Analytics WordPress plugin does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection vulnerability.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Unknown | Article analytics | 0 <= 1.0 | affected |
Weaknesses
- CWE-89 SQL Injection
ADP Enrichment
CVE Program Container
Additional References
- https://wpscan.com/vulnerability/9a383ef5-0f1a-4894-8f78-845abcb5062d
- https://devl00p.github.io/posts/Injection-SQL-dans-le-plugin-Wordpress-Article-Analytics/
References
- https://wpscan.com/vulnerability/9a383ef5-0f1a-4894-8f78-845abcb5062d
- https://devl00p.github.io/posts/Injection-SQL-dans-le-plugin-Wordpress-Article-Analytics/
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.