CVE-2023-2492

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

The QueryWall: Plug'n Play Firewall WordPress plugin through 1.1.1 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
UnknownQueryWall: Plug'n Play Firewall<= 1.1.1

References

Timeline

Published
Jun 19, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-249205.4Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityCVE-2023-249215.4Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityCVE-2023-249226.5Microsoft Dynamics 365 (On-Premises) Information Disclosure VulnerabilityCVE-2023-249235.5Microsoft OneDrive for Android Information Disclosure VulnerabilityCVE-2023-249248.8Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityCVE-2023-249258.8Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityCVE-2023-249268.8Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityCVE-2023-249278.8Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityCVE-2023-249288.8Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityCVE-2023-249298.8Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityCVE-2023-24937.2The All In One Redirection WordPress plugin before 2.2.0 does not properly sanitise and escape multiple parameters before using them in an SCVE-2023-249307.8Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability