WordPress ImageLinks Interactive Image Builder Plugin <= 1.5.4 is vulnerable to SQL Injection
CVE-2023-46823
7.2HIGH
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 6 November 2023
What is CVE-2023-46823?
An SQL Injection vulnerability exists in the Avirtum ImageLinks Interactive Image Builder for WordPress, allowing attackers to manipulate SQL queries. When user inputs are not properly sanitized, it can result in unauthorized access to sensitive database information, potentially compromising the integrity of the web applications that rely on this plugin. The issue impacts versions from n/a through 1.5.4, and users are advised to update to the latest version to mitigate the risk.
Affected Version(s)
ImageLinks Interactive Image Builder for WordPress <= 1.5.4