Vulnerability Details CVE-2023-0234
The SiteGround Security WordPress plugin before 1.3.1 does not properly sanitize user input before using it in an SQL query, leading to an authenticated SQL injection issue.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.125
EPSS Ranking 93.7%
CVSS Severity
CVSS v3 Score 8.8
References
- https://github.com/namah-age/CVEs/blob/master/1.md
- https://wpscan.com/vulnerability/acf3e369-1290-4b3f-83bf-2209b9dd06e1
- https://www.siteground.com/viewtos/responsible_disclosure_policy?scid=4&lang=en
- https://github.com/namah-age/CVEs/blob/master/1.md
- https://wpscan.com/vulnerability/acf3e369-1290-4b3f-83bf-2209b9dd06e1
- https://www.siteground.com/viewtos/responsible_disclosure_policy?scid=4&lang=en
Products affected by CVE-2023-0234
-
cpe:2.3:a:siteground:siteground_security:*