CVE-2023-0630

Slimstat Analytics < 4.9.3.3 - Subscriber+ SQL Injection

published March 20, 2023

CVSS
—
EPSS
5%
Percentile
92.4
In the wild
Unconfirmed
What it is

The Slimstat Analytics WordPress plugin before 4.9.3.3 does not prevent subscribers from rendering shortcodes that concatenates attributes directly into an SQL query.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05141 · 92.4th percentile
Published
2023-03-20T15:52Z
EPSS history
Timeline
  • 20 MAR 15:52Z
    Slimstat Analytics < 4.9.3.3 - Subscriber+ SQL Injection
    cvelistv5