CVE-2023-0900

AP Pricing Tables Lite <= 1.1.6 - Admin+ SQLi

High · published June 5, 2023

CVSS v3.1
7.2
EPSS
3%
Percentile
88.2
In the wild
Unconfirmed
What it is

The Pricing Table Builder WordPress plugin through 1.1.6 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high-privilege users such as admins.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.03229 · 88.2th percentile
Published
2023-06-05T13:39Z
EPSS history
Timeline
  • 05 JUN 13:39Z
    AP Pricing Tables Lite <= 1.1.6 - Admin+ SQLi
    cvelistv5