CVE-2023-0579

YARPP - Yet Another Related Posts Plugin < 5.30.3 - Subscriber+ SQLi

published August 16, 2023

CVSS
—
EPSS
1%
Percentile
60.6
In the wild
Unconfirmed
What it is

The YARPP WordPress plugin before 5.30.3 does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could allow any authenticated users, such as subscribers to perform SQL Injection attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00940 · 60.6th percentile
Published
2023-08-16T11:03Z
EPSS history
Timeline
  • 16 AUG 11:03Z
    YARPP - Yet Another Related Posts Plugin < 5.30.3 - Subscriber+ SQLi
    cvelistv5