CVE-2023-2493

All In One Redirection < 2.2.0 - Admin+ SQLi

published July 10, 2023

CVSS
—
EPSS
1%
Percentile
64.8
In the wild
Unconfirmed
What it is

The All In One Redirection WordPress plugin before 2.2.0 does not properly sanitise and escape multiple parameters before using them in an SQL statement, leading to a SQL injection exploitable by high privilege users such as admin.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01077 · 64.8th percentile
Published
2023-07-10T12:40Z
EPSS history
Timeline
  • 10 JUL 12:40Z
    All In One Redirection < 2.2.0 - Admin+ SQLi
    cvelistv5