SQL Injection Vulnerability in iPanorama 360 Plugin for WordPress

CVE-2023-5336

What is CVE-2023-5336?

The iPanorama 360 – WordPress Virtual Tour Builder plugin is affected by an SQL Injection vulnerability that arises from improper escaping of user-supplied data within its shortcode functionality. This security flaw allows authenticated attackers with contributor-level permissions and higher to manipulate existing SQL queries by appending their own. Consequently, this exposes the plugin to potential data breaches, enabling attackers to access sensitive data stored in the database.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References