Intuitive Custom Post Order

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-1016 Jun 09, 06:15 MEDIUM PATCH This Month

The Intuitive Custom Post Order plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 3.1.4.1, due to insufficient escaping on the user supplied 'objects' and 'tags'. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable.

WordPress SQLi Intuitive Custom Post Order Wordpress Plugin

NVD VulDB

CVSS 3.1

6.6

EPSS

0.1%

CVE-2023-1016

EPSS 0% CVSS 6.6

MEDIUM PATCH This Month

The Intuitive Custom Post Order plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 3.1.4.1, due to insufficient escaping on the user supplied 'objects' and 'tags'. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable.

WordPress SQLi Intuitive Custom Post Order +1

NVD VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy