CVE-2023-0259: falha de alta gravidade em WP Google Review Slider
WP Google Review Slider < 11.8 - Subscriber+ SQLi
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.8epss 0.9%
The WP Google Review Slider WordPress plugin before 11.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Unknown · WP Google Review SliderCVEs relacionadas — WP Google Review Slider
No mesmo produto, das mais perigosas para as menos.
CVE-2022-4242MEDIUMWP Google Review Slider < 11.6 - Admin+ Stored XSSEPSS 0.6%CVE-2024-11109MEDIUMWP Google Review Slider < 15.6 - Admin+ Stored XSSEPSS 0.3%CVE-2024-2310MEDIUMWP Google Review Slider < 13.6 - Admin+ Stored XSSEPSS 0.3%CVE-2026-117588MEDIUMWP Google Review Slider < 18.11 - Google API Settings Update via CSRFEPSS 0.1%