CVE-2023-2493
Last modified
CVE-2023-2493 is a high-severity vulnerability rated 7.2/10 on the CVSS scale. The All In One Redirection WordPress plugin before 2.2.0 does not properly sanitise and escape multiple parameters before using them in an SQL statement, leading to a SQL injection exploitable by high privilege users such as admin.. EPSS estimates a 0.83% chance of exploitation in the next 30 days.
Description
The All In One Redirection WordPress plugin before 2.2.0 does not properly sanitise and escape multiple parameters before using them in an SQL statement, leading to a SQL injection exploitable by high privilege users such as admin.
Metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Vsourz | All In One Redirection | < 2.2.0 |
References
- https://wpscan.com/vulnerability/a9a205a4-eef9-4f30-877a-4c562930650cExploit, Third Party Advisory
- https://wpscan.com/vulnerability/a9a205a4-eef9-4f30-877a-4c562930650cExploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-2493?
How severe is CVE-2023-2493?
How do I fix CVE-2023-2493?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-24924Microsoft PostScript and PCL6 Class Printer Driver Remote Co…8.8
- CVE-2023-24925Microsoft PostScript and PCL6 Class Printer Driver Remote Co…8.8
- CVE-2023-24926Microsoft PostScript and PCL6 Class Printer Driver Remote Co…8.8
- CVE-2023-24927Microsoft PostScript and PCL6 Class Printer Driver Remote Co…8.8
- CVE-2023-24928Microsoft PostScript and PCL6 Class Printer Driver Remote Co…8.8
- CVE-2023-24929Microsoft PostScript and PCL6 Class Printer Driver Remote Co…8.8
- CVE-2023-24930Microsoft OneDrive for MacOS Elevation of Privilege Vulnerab…7.8
- CVE-2023-24931Windows Secure Channel Denial of Service Vulnerability7.5
- CVE-2023-24932Secure Boot Security Feature Bypass Vulnerability6.7
- CVE-2023-24934Microsoft Defender Security Feature Bypass Vulnerability5.5
- CVE-2023-24935Microsoft Edge (Chromium-based) Spoofing Vulnerability6.1
- CVE-2023-24936.NET, .NET Framework, and Visual Studio Elevation of Privile…7.5
Are you affected by CVE-2023-2493?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST