Skip to content
Sign in
8.8 High

CVE-2023-2921 The Short URL WordPress plugin through 1.6.8 does not properly sanitise and escape a parameter before using it in SQL…

Description

The Short URL WordPress plugin through 1.6.8 does not properly sanitise and escape a parameter before using it in SQL statement, leading to a SQL injection exploitable by users with relatively low privilege on the site, like subscribers.

Affected products and versions

Product Affected versions Fixed in
Short URL 1.6 earliest → 1.6.8 No fix stated

Other CVEs of Short URL

The 2 CVEs of Short URL →
CVE-2023-3130 The Short URL WordPress plugin before 1.6.5 does not sanitise and escape some of its settings, which could allow high… Not rated
Track this CVE