WordPress MainWP Broken Links Checker Extension Plugin <= 4.0 is vulnerable to SQL Injection

CVE-2023-23737

What is CVE-2023-23737?

The MainWP Broken Links Checker Extension plugin versions up to 4.0 are susceptible to an unauthenticated SQL Injection vulnerability. This security flaw allows attackers to manipulate and execute arbitrary SQL queries through the application’s input fields, potentially leading to unauthorized access to sensitive data within the database. Website owners using this extension should be vigilant and apply the necessary updates or patches to secure their installations and prevent exploitation.

References