Unrated

Slimstat Analytics < 4.9.3.3 - Subscriber+ SQL Injection

CVE-2023-0630 First seen on SecPulse Mar 21, 2023

Original description The description as published by the source.

The Slimstat Analytics WordPress plugin before 4.9.3.3 does not prevent subscribers from rendering shortcodes that concatenates attributes directly into an SQL query.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
report wpscan.com
web wordpress.org

Key facts

Severity: Unrated
Published: Mar 21, 2023
First seen on SecPulse: Mar 21, 2023

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:01