CVE-2023-2493

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

The All In One Redirection WordPress plugin before 2.2.0 does not properly sanitise and escape multiple parameters before using them in an SQL statement, leading to a SQL injection exploitable by high privilege users such as admin.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Jul 10, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-249307.8Microsoft OneDrive for MacOS Elevation of Privilege VulnerabilityCVE-2023-249317.5Windows Secure Channel Denial of Service VulnerabilityCVE-2023-249326.7Secure Boot Security Feature Bypass VulnerabilityCVE-2023-249345.5Microsoft Defender Security Feature Bypass VulnerabilityCVE-2023-249356.1Microsoft Edge (Chromium-based) Spoofing VulnerabilityCVE-2023-249367.5.NET, .NET Framework, and Visual Studio Elevation of Privilege VulnerabilityCVE-2023-249376.5Windows CryptoAPI Denial of Service VulnerabilityCVE-2023-249386.5Windows CryptoAPI Denial of Service VulnerabilityCVE-2023-249397.5Server for NFS Denial of Service VulnerabilityCVE-2023-24948.8The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to unauthorized modification of data due to a missinCVE-2023-249407.5Windows Pragmatic General Multicast (PGM) Denial of Service VulnerabilityCVE-2023-249419.8Windows Network File System Remote Code Execution Vulnerability
CVE-2023-2493: High severity, CVSS 7.2 | Vulnix