PT-2023-16102 · Siteground · Siteground Security Wordpress Plugin

So Sakaguchi · Publicado 2023-02-06 · Atualizado 2025-03-25 · CVE-2023-0234

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SiteGround Security WordPress plugin versions prior to 1.3.1

Description The issue arises from the plugin's failure to properly sanitize user input before using it in an SQL query, leading to an authenticated SQL injection issue.

Recommendations For versions prior to 1.3.1, update to version 1.3.1 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2023-0234

Produtos afetados

Siteground Security Wordpress Plugin

Referências · 7

• 🔥 https://wpscan.com/vulnerability/acf3e369-1290-4b3f-83bf-2209b9dd06e1 · Exploit
• 🔥❌ https://github.com/namah-age/CVEs/blob/master/1.md · Exploit, Deleted
• https://t.me/cvenotify/116206 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-0234 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-0234 · Aviso do Fabricante
• https://siteground.com/viewtos/responsible_disclosure_policy?scid=4&lang=en · Nota
• https://t.me/cibsecurity/57593 · Publicação no Telegram