Not rated

CVE-2023-5640 The Article Analytics WordPress plugin does not properly sanitise and escape a parameter before using it in a SQL…

Description

The Article Analytics WordPress plugin does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection vulnerability.

Affected products and versions

Product	Affected versions	Fixed in
Article analytics 1.0	earliest → 1.0	No fix stated

Do you use Article analytics?

Track this CVE Watch Article analytics Check my SBOMs

www.cveye.io/en/cve/CVE-2023-5640

Timeline

Published November 20, 2023
Last modified August 2, 2024

References

wpscan.com wpscan.com
devl00p.github.io devl00p.github.io

Track this CVE