Skip to content

Known CVE

Video List Manager <= 1.7 - SQL Injection

The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin.

CVE-2023-1408

High2023CVSS 7.2CWE-89

time-based-sqli · cve2023 · wpscan · sqli · wordpress · wp-plugin · wp · authenticated

Verified scans run this check after you prove you own the site.

All known CVEsView the checks catalogNational Vulnerability Database

Scan a website