CVE-2023-5203 — WP Sessions Time Monitoring Full Automatic < 1.0.9 - Unauthenticated SQL injection

Description (CNA)

The WP Sessions Time Monitoring Full Automatic WordPress plugin before 1.0.9 does not sanitize the request URL or query parameters before using them in an SQL query, allowing unauthenticated attackers to extract sensitive data from the database via blind time based SQL injection techniques, or in some cases an error/union based technique.

Affected (CNA)

Vendor / product	Versions
Unknown / WP Sessions Time Monitoring Full Automatic	affected 0 before 1.0.9

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/7f4f505b-2667-4e0f-9841-9c1cd0831932

ADP enrichment

CVE

No English description supplied.

https://wpscan.com/vulnerability/7f4f505b-2667-4e0f-9841-9c1cd0831932

CISA-ADP

No English description supplied.

No references supplied.