CVE-2023-52131

CVSS 3.1 Score 7.2 of 10 (high)

Details

Published Dec 31, 2023
Updated: Jan 5, 2024
CWE ID 89

Summary

CVE-2023-52131 is an SQL injection vulnerability affecting WP Zinc Page Generator from versions n/a through 1.7.1. Malicious actors can exploit this issue by inserting malicious SQL statements, which may lead to unauthorized access, data theft, or website defacement. This vulnerability occurs due to the plugin's failure to properly neutralize special elements in SQL commands. Users are advised to update the plugin to the latest version and apply the necessary security patches to protect against potential attacks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share