CVE-2023-5437

Summary

CVE-2023-5437 is a vulnerability affecting the WP Fade In Text News plugin for WordPress. The issue lies in the plugin's shortcode, which allows authenticated attackers with subscriber-level permissions and above to perform SQL Injection due to inadequate escaping of user-supplied data and insufficient preparation of SQL queries. Consequently, attackers can append additional SQL queries to existing ones, potentially extracting sensitive information from the database.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.