PT-2023-23895 · Unknown · Subscribe To Category

Mika · Published 2023-12-20 · Updated 2026-02-17 · CVE-2023-32590

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions Subscribe to Category versions n/a through 2.7.4

Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command.

Recommendations For versions n/a through 2.7.4, update to a version that contains a fix for this issue.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2023-32590

Affected Products

Subscribe To Category

References · 4

• https://osv.dev/vulnerability/CVE-2023-32590 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-32590 · Security Note
• https://twitter.com/pdnuclei_bot/status/2023563091439698214 · Twitter Post
• https://patchstack.com/database/vulnerability/subscribe-to-category/wordpress-subscribe-to-category-plugin-2-7-4-sql-injection-vulnerability?_s_id=cve · Note