CVE-2023-0234

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

The SiteGround Security WordPress plugin before 1.3.1 does not properly sanitize user input before using it in an SQL query, leading to an authenticated SQL injection issue.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Feb 6, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-02366.1The Tutor LMS WordPress plugin before 2.0.10 does not sanitise and escape the reset_key and user_id parameters before outputting then back iCVE-2023-02385.5Due to lack of a security policy, the WARP Mobile Client (<=6.29) for Android was susceptible to this vulnerability which allowed a maliciouCVE-2023-02407.8There is a logic error in io_uring's implementation which can be used to trigger a use-after-free vulnerability leading to privilege escalatCVE-2023-02416.5pgAdmin 4 versions prior to v6.19 contains a directory traversal vulnerability. A user of the product may change another user's settings or CVE-2023-02428.8Rapid7 Velociraptor allows users to be created with different privileges on the server. Administrators are generally allowed to run any commCVE-2023-02439.8A vulnerability classified as critical has been found in TuziCMS 2.0.6. This affects the function index of the file App\Manage\Controller\ArCVE-2023-02449.8A vulnerability classified as critical was found in TuziCMS 2.0.6. This vulnerability affects the function delall of the file \App\Manage\CoCVE-2023-02459.8A vulnerability, which was classified as critical, has been found in SourceCodester Online Flight Booking Management System. This issue affeCVE-2023-02465.4A vulnerability, which was classified as problematic, was found in earclink ESPCMS P8.21120101. Affected is an unknown function of the compoCVE-2023-02477.8Uncontrolled Search Path Element in GitHub repository bits-and-blooms/bloom prior to 3.3.1.CVE-2023-02485.3An attacker with physical access to the Kantech Gen1 ioSmart card reader with firmware version prior to 1.07.02 in certain circumstances canCVE-2023-02497.8Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to out-of-bounds write, which may allow an attacker to remotely execu