WordPress Shortcode IMDB Plugin <= 6.0.8 is vulnerable to SQL Injection
CVE-2022-47432

9.8CRITICAL

Key Information:

Vendor
WordPress
Status
Shortcode Imdb
Vendor
CVE Published:
6 November 2023

Summary

The PluginPress Shortcode IMDB, developed by Kemal YAZICI, is susceptible to an SQL Injection vulnerability due to improper handling of special elements in SQL commands. This flaw allows an attacker to manipulate SQL queries, potentially leading to unauthorized access to the database. Users running versions up to 6.0.8 without updates may be exposed to data breaches and exploitation attempts.

Affected Version(s)

Shortcode IMDB <= 6.0.8

References

https://patchstack.com/database/vulnerability/shortcode-i...
vdb-entry

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

minhtuanact (Patchstack Alliance)
.