7.2
High
CVE-2023-1207 This HTTP Headers WordPress plugin before 1.18.8 has an import functionality which executes arbitrary SQL on the server,…
Description
This HTTP Headers WordPress plugin before 1.18.8 has an import functionality which executes arbitrary SQL on the server, leading to an SQL Injection vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HTTP Headers 1.18 | earliest → < 1.18.8 | 1.18.8 |