WC Fields Factory, CVE-2023-0277

CVE, Research URL: CVE-2023-0277
Home page URL: Security reports for WC Fields Factory
Application: WC Fields Factory
Published on: Apr 17, 2023
Research Description: The WC Fields Factory WordPress plugin through 4.1.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin
Affected versions: Min -, max 4.1.7.
Status: vulnerable