CVE Database /
CVE-2023-0579
CVE · High
CVE-2023-0579 — YARPP – Yet Another Related Posts Plugin [yet-another-related-posts-plugin] < 5.30.3 (closed)
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-0579
|
YARPP – Yet Another Related Posts Plugin [yet-another-related-posts-plugin] < 5.30.3 (closed) |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
High
8.8
|
< 5.30.3
|
5.30.3 |
2023-04-25 |
—
|
CVE-2023-0579
The YARPP plugin for WordPress contains a SQL injection vulnerability affecting versions through 5.30.2, stemming from inadequate escaping of the 'limit' parameter when used in shortcodes and improper preparation of the underlying SQL query. Authenticated users with subscriber-level access or higher can exploit this flaw by injecting malicious SQL code to retrieve sensitive data from the database. The vulnerability was patched in version 5.30.3.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings