CVE-2023-0630: vulnerability in Slimstat Analytics
Slimstat Analytics < 4.9.3.3 - Subscriber+ SQL Injection
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
18Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 5.1%
The Slimstat Analytics WordPress plugin before 4.9.3.3 does not prevent subscribers from rendering shortcodes that concatenates attributes directly into an SQL query.
Affected products
Unknown · Slimstat AnalyticsRelated CVEs — Slimstat Analytics
In the same product, most dangerous first.