CVE-2023-0234

SiteGround Security < 1.3.1 - Admin+ SQLi

High · published February 6, 2023

CVSS v3.1
8.8
EPSS
18%
Percentile
97.2
In the wild
Unconfirmed
What it is

The SiteGround Security WordPress plugin before 1.3.1 does not properly sanitize user input before using it in an SQL query, leading to an authenticated SQL injection issue.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.17992 · 97.2th percentile
Published
2023-02-06T19:59Z
EPSS history
Timeline
  • 06 FEB 19:59Z
    SiteGround Security < 1.3.1 - Admin+ SQLi
    cvelistv5