Skip to content
Sign in
Not rated

CVE-2023-0579 The YARPP WordPress plugin before 5.30.3 does not validate and escape some of its shortcode attributes before using them…

Description

The YARPP WordPress plugin before 5.30.3 does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could allow any authenticated users, such as subscribers to perform SQL Injection attacks.

Affected products and versions

Product Affected versions Fixed in
YARPP 5.30 earliest → < 5.30.3 5.30.3

Other CVEs of YARPP

The 2 CVEs of YARPP →
CVE-2022-4471 The YARPP WordPress plugin before 5.30.3 does not validate and escape some of its shortcode attributes before outputting… 6.8 Medium
Track this CVE