Paper/Archive/CVE-2023-32508

CVE-2023-32508

Rolf van Gelder Order Your Posts Manually — WordPress Order Your Posts Manually Plugin <= 2.2.5 is vulnerable to SQL Injection

EPSS 0.7%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (ADP)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 52.2.522 × 2010.4 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Rolf van Gelder Order Your Posts Manually allows SQL Injection.This issue affects Order Your Posts Manually: from n/a through 2.2.5.

Affected

ProductAffectedFixed inSource

Order Your Posts Manuallyn/a – 2.2.5–CNA

order_your_posts_monthly≤ 2.2.5–CISA-ADP

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Patchstack (CNA)7.6CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refpatchstack.com/database/vulnerability/order-your-posts-manually/wordpress-order-your-posts-manually-plugin-2-2-5-sql-injection-vulnerability?_s_id=cve