{"vulnerability": "CVE-2023-2348", "sightings": [{"uuid": "1dd331e2-3a4c-4d06-8954-9ff1bfe7c74e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "exploited", "source": "https://www.exploit-db.com/exploits/51235", "content": "", "creation_timestamp": "2023-04-03T00:00:00.000000Z"}, {"uuid": "d8e38f07-3e38-43cb-ad5b-7c4f915de60d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23489", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-31)", "content": "", "creation_timestamp": "2025-01-31T00:00:00.000000Z"}, {"uuid": "b463b620-c600-474c-8156-7441a228a742", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:45.000000Z"}, {"uuid": "03c8c339-82cd-4fca-bc61-cc98e30d8a1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23489", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-01)", "content": "", "creation_timestamp": "2025-02-01T00:00:00.000000Z"}, {"uuid": "f6f59769-100c-4660-b839-23684f022bcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:51.000000Z"}, {"uuid": "e397eae8-878e-44c5-aca5-8c30957800aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23489", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-22)", "content": "", "creation_timestamp": "2025-02-22T00:00:00.000000Z"}, {"uuid": "e73c4a1c-d86f-4fab-a918-d81422f73ca9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3likodqqxye2c", "content": "", "creation_timestamp": "2025-02-19T21:02:36.347606Z"}, {"uuid": "99295813-24fd-4378-88ca-f7e3e15662ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23489", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-02)", "content": "", "creation_timestamp": "2025-03-02T00:00:00.000000Z"}, {"uuid": "cb89bf72-98c1-4b91-bbbc-9bc7ef0036bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23489", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-18)", "content": "", "creation_timestamp": "2025-05-18T00:00:00.000000Z"}, {"uuid": "17626d39-ef4d-464f-8287-c1fb6be856cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23489", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-07)", "content": "", "creation_timestamp": "2025-07-07T00:00:00.000000Z"}, {"uuid": "372f3928-f554-478a-90de-8ba4a16de873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23489", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-10)", "content": "", "creation_timestamp": "2025-05-10T00:00:00.000000Z"}, {"uuid": "481285c6-2ef8-499c-8e1a-1a50141f86a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23489", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-11)", "content": "", "creation_timestamp": "2025-05-11T00:00:00.000000Z"}, {"uuid": "819603e4-07ff-4227-9c15-50f282144705", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23489", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-19)", "content": "", "creation_timestamp": "2025-09-19T00:00:00.000000Z"}, {"uuid": "f9419e60-f797-454b-b4bb-b7bd93174217", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23489", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-15)", "content": "", "creation_timestamp": "2025-10-15T00:00:00.000000Z"}, {"uuid": "c8a95cbe-3e45-40de-b5e7-270798395f53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23489", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-09)", "content": "", "creation_timestamp": "2025-11-09T00:00:00.000000Z"}, {"uuid": "3189a8e2-7806-43b7-a47b-0fa9cf7ba1b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wp_paid_membership_pro_code_sqli.rb", "content": "", "creation_timestamp": "2023-01-19T15:57:30.000000Z"}, {"uuid": "b8e67382-7db3-47bd-825f-3824c5671598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:12:57.000000Z"}, {"uuid": "a7a7c64e-21b7-4df4-b519-1e7c32b39bd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23489", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-14)", "content": "", "creation_timestamp": "2026-02-14T00:00:00.000000Z"}, {"uuid": "98880d60-d787-46bc-b52a-fd40d89de73a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23489", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-06)", "content": "", "creation_timestamp": "2026-01-06T00:00:00.000000Z"}, {"uuid": "f2f252d6-92b0-4ada-8a99-ca5639d5d26f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "published-proof-of-concept", "source": "Telegram/5T9p9Zashh8_t2QaMEcrWCxGmV69ND__6VmH0ET2CJ3Gp-A", "content": "", "creation_timestamp": "2023-03-14T09:24:23.000000Z"}, {"uuid": "c9d256f0-6837-4e01-b613-d7623f39fa22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23487", "type": "seen", "source": "https://t.me/arpsyndicate/2456", "content": "#ExploitObserverAlert\n\nCVE-2023-23487\n\nDESCRIPTION: Exploit Observer has 3 entries related to CVE-2023-23487. IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to insufficient audit logging.  IBM X-Force ID:  245918.\n\nFIRST-EPSS: 0.000550000\nNVD-IS: 1.4\nNVD-ES: 2.8", "creation_timestamp": "2024-01-04T12:26:03.000000Z"}, {"uuid": "0f23302e-68fd-4b8d-922a-a1dbbd5e735c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23489", "type": "seen", "source": "Telegram/opQUKJsRp4O-8-Aia14rQwYiX5GNaIp9JRJcg0Q3xR13-hS2", "content": "", "creation_timestamp": "2024-07-17T17:38:23.000000Z"}, {"uuid": "42160ba5-6133-49e0-a5b7-5d013f20f958", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23489", "type": "seen", "source": "https://t.me/true_secator/3945", "content": "\u041f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u043f\u043b\u0430\u0433\u0438\u043d\u044b WordPress \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b. \n\n\u041e\u0448\u0438\u0431\u043a\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u043e\u043c \u0414\u0436\u043e\u0448\u0443\u0430 \u041c\u0430\u0440\u0442\u0438\u043d\u0435\u043b\u043b\u043e\u043c \u0438\u0437 Tenable, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e \u043d\u0438\u0445 WordPress 19 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430 \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 PoC.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0434\u043d\u0438, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0432\u0441\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b.\n\n\u0412\u0447\u0435\u0440\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b PoC \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041f\u0435\u0440\u0432\u044b\u0439 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u043c\u044b\u0439 \u043c\u043e\u0434\u0443\u043b\u044c - \u044d\u0442\u043e\u00a0Paid Memberships Pro, \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0447\u043b\u0435\u043d\u0441\u0442\u0432\u043e\u043c \u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u043a\u0430\u043c\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u043d\u0430 100 000 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u0430\u0445.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e Tenable, \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c \u00ab\u043a\u043e\u0434\u00bb \u0432 REST-\u0440\u043e\u0443\u0442\u0435 /pmpro/v1/order \u043f\u0435\u0440\u0435\u0434 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0435\u0433\u043e \u0432 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0435 SQL.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 CVSSv3 9,8 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-23488 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 \u0441\u0442\u0430\u0440\u0448\u0435 2.9.8, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 27 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u043d\u0430\u0434\u0441\u0442\u0440\u043e\u0439\u043a\u0430 WordPress, \u0443\u044f\u0437\u0432\u0438\u043c\u0430\u044f \u0434\u043b\u044f SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439, -\u00a0Easy Digital Downloads, \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043c\u0435\u0440\u0446\u0438\u0438, \u0438\u043c\u0435\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 50 000 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c \u00abs\u00bb \u0432 \u00abedd_download_search\u00bb \u043f\u0435\u0440\u0435\u0434 \u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0435 SQL.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-23489 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 CVSSv3 9,8.\u00a0\u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.1.0.4, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0435 5 \u044f\u043d\u0432\u0430\u0440\u044f 2023 \u0433\u043e\u0434\u0430.\n\n\u041d\u0430\u043a\u043e\u043d\u0435\u0446, Tenable \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e CVE-2023-23490 \u0432\u00a0Survey Marker, \u043f\u043b\u0430\u0433\u0438\u043d\u0435 WordPress, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u043d\u0430 3000 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u0430\u0445 \u0434\u043b\u044f \u043e\u043f\u0440\u043e\u0441\u043e\u0432 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u0440\u044b\u043d\u043a\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 8,8, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u043e\u0434\u043f\u0438\u0441\u0447\u0438\u043a\u0430. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0441 21 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433. \u0441 \u0432\u0435\u0440\u0441\u0438\u0435\u0439 3.1.2.\n\nTenable \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u043a\u0430\u043a\u043e\u0435 \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u043e\u043a\u0430\u0437\u0430\u0442\u044c \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041e\u0434\u043d\u0430\u043a\u043e, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u044c \u043e\u0448\u0438\u0431\u043e\u043a, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438.", "creation_timestamp": "2023-01-16T17:30:07.000000Z"}, {"uuid": "9a42ac9a-c9e5-4a13-9e2f-1fabbadd6630", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "seen", "source": "https://t.me/true_secator/3945", "content": "\u041f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u043f\u043b\u0430\u0433\u0438\u043d\u044b WordPress \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b. \n\n\u041e\u0448\u0438\u0431\u043a\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u043e\u043c \u0414\u0436\u043e\u0448\u0443\u0430 \u041c\u0430\u0440\u0442\u0438\u043d\u0435\u043b\u043b\u043e\u043c \u0438\u0437 Tenable, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e \u043d\u0438\u0445 WordPress 19 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430 \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 PoC.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0434\u043d\u0438, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0432\u0441\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b.\n\n\u0412\u0447\u0435\u0440\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b PoC \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041f\u0435\u0440\u0432\u044b\u0439 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u043c\u044b\u0439 \u043c\u043e\u0434\u0443\u043b\u044c - \u044d\u0442\u043e\u00a0Paid Memberships Pro, \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0447\u043b\u0435\u043d\u0441\u0442\u0432\u043e\u043c \u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u043a\u0430\u043c\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u043d\u0430 100 000 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u0430\u0445.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e Tenable, \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c \u00ab\u043a\u043e\u0434\u00bb \u0432 REST-\u0440\u043e\u0443\u0442\u0435 /pmpro/v1/order \u043f\u0435\u0440\u0435\u0434 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0435\u0433\u043e \u0432 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0435 SQL.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 CVSSv3 9,8 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-23488 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 \u0441\u0442\u0430\u0440\u0448\u0435 2.9.8, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 27 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u043d\u0430\u0434\u0441\u0442\u0440\u043e\u0439\u043a\u0430 WordPress, \u0443\u044f\u0437\u0432\u0438\u043c\u0430\u044f \u0434\u043b\u044f SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439, -\u00a0Easy Digital Downloads, \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043c\u0435\u0440\u0446\u0438\u0438, \u0438\u043c\u0435\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 50 000 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c \u00abs\u00bb \u0432 \u00abedd_download_search\u00bb \u043f\u0435\u0440\u0435\u0434 \u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0435 SQL.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-23489 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 CVSSv3 9,8.\u00a0\u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.1.0.4, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0435 5 \u044f\u043d\u0432\u0430\u0440\u044f 2023 \u0433\u043e\u0434\u0430.\n\n\u041d\u0430\u043a\u043e\u043d\u0435\u0446, Tenable \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e CVE-2023-23490 \u0432\u00a0Survey Marker, \u043f\u043b\u0430\u0433\u0438\u043d\u0435 WordPress, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u043d\u0430 3000 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u0430\u0445 \u0434\u043b\u044f \u043e\u043f\u0440\u043e\u0441\u043e\u0432 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u0440\u044b\u043d\u043a\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 8,8, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u043e\u0434\u043f\u0438\u0441\u0447\u0438\u043a\u0430. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0441 21 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433. \u0441 \u0432\u0435\u0440\u0441\u0438\u0435\u0439 3.1.2.\n\nTenable \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u043a\u0430\u043a\u043e\u0435 \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u043e\u043a\u0430\u0437\u0430\u0442\u044c \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041e\u0434\u043d\u0430\u043a\u043e, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u044c \u043e\u0448\u0438\u0431\u043e\u043a, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438.", "creation_timestamp": "2023-01-16T17:30:07.000000Z"}, {"uuid": "5a694c71-12a9-475a-acfa-1e7a5f96ee82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "seen", "source": "https://t.me/DailyToolz/582", "content": "#wts res exploit wordpress 0-day sqli 2023\n\ncve : CVE-2023-23488\nsource / news : https://vuldb.com/?ctiid.218341\n\nprice  : [ SOLD ] ty for buying", "creation_timestamp": "2023-01-15T09:28:44.000000Z"}, {"uuid": "ac948c96-b7c0-4238-b2d2-da96d3785d64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23481", "type": "seen", "source": "https://t.me/cibsecurity/65061", "content": "\u203c CVE-2023-23481 \u203c\n\nIBM Sterling Partner Engagement Manager 6.1, 6.2, and 6.2.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 245889.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-08T07:40:40.000000Z"}, {"uuid": "b31797fb-b3ea-429f-9fb4-952736ffd969", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-2348", "type": "seen", "source": "https://t.me/cibsecurity/62985", "content": "\u203c CVE-2023-2348 \u203c\n\nA vulnerability was found in SourceCodester Service Provider Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/user/manage_user.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227591.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-27T18:40:12.000000Z"}, {"uuid": "9b692816-4eca-43af-889d-b1a36e3b5d30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23489", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-29)", "content": "", "creation_timestamp": "2026-04-29T00:00:00.000000Z"}, {"uuid": "5a3afe6b-e014-4804-acc8-fb2be7ebbb55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "seen", "source": "https://t.me/cibsecurity/56776", "content": "\u203c CVE-2023-23488 \u203c\n\nThe Paid Memberships Pro WordPress Plugin, version < 2.9.8, is affected by an unauthenticated SQL injection vulnerability in the 'code' parameter of the '/pmpro/v1/order' REST route.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-20T20:22:54.000000Z"}, {"uuid": "cdfa7043-9941-4d1b-bacc-5b053b1238ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23489", "type": "seen", "source": "https://t.me/cibsecurity/56774", "content": "\u203c CVE-2023-23489 \u203c\n\nThe Easy Digital Downloads WordPress Plugin, version < 3.1.0.4, is affected by an unauthenticated SQL injection vulnerability in the 's' parameter of its 'edd_download_search' action.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-20T20:22:51.000000Z"}, {"uuid": "7e48bf36-ea82-48bc-bf48-2c81a41fb13e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/14537", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2023-23488-pmpro-2.8*\nGithub: https://github.com/cybfar/CVE-2023-23488-pmpro-2.8", "creation_timestamp": "2026-07-31T00:00:28.058288Z"}, {"uuid": "0836776c-f5e2-40f4-a331-63234dafaa4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/7921", "content": "#exploit\n1. CVE-2020-2546, CVE-2020-2915,\nCVE-2020-2801, CVE-2020-2798,\nCVE-2020-2883, CVE-2020-2884,\nCVE-2020-2950:\nWebLogic T3 payload exploit PoC python3\nhttps://github.com/hktalent/CVE_2020_2546\n\n2. Tips, Tricks, and Scripts for Linux Post Exploitation\nhttps://github.com/regorsec/Linux-Post-Exploitation\n\n3. CVE-2023-23488:\nUnauthenticated SQL Injection - Paid Memberships Pro < 2.9.8 (WordPress Plugin)\nhttps://github.com/r3nt0n/CVE-2023-23488-PoC", "creation_timestamp": "2023-03-13T22:21:06.000000Z"}, {"uuid": "fe2da74b-4917-4038-bac2-e9ce2c5f5e6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/10211", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2023-23488-PoC*\nGithub: https://github.com/r3nt0n/CVE-2023-23488-PoC", "creation_timestamp": "2026-07-31T08:00:04.903020Z"}, {"uuid": "c0cb5794-e340-449b-88d9-c607f53ff216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/10211", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2023-23488-PoC*\nGithub: https://github.com/r3nt0n/CVE-2023-23488-PoC", "creation_timestamp": "2026-08-01T00:00:38.301357Z"}, {"uuid": "210e1cf0-564e-455c-a6b6-a4e778965aea", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23489", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/93101682-16a0-454b-b48c-40ee9a5cc62a", "content": "", "creation_timestamp": "2026-06-19T12:46:02.435434Z"}, {"uuid": "bb9404b7-a162-499b-a4a9-3b7b20e8220e", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23489", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/42013d0b-8f86-4457-9df8-9bdd255ee4b0", "content": "", "creation_timestamp": "2026-06-23T14:03:24.869501Z"}, {"uuid": "cb9b5137-5532-48e3-9dfd-5e7764a439de", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2023-23489", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/98b8f172-407c-4293-90b1-bac50977693f", "content": "", "creation_timestamp": "2026-06-30T09:23:06.919263Z"}, {"uuid": "d1939ada-3ab8-401b-9e4d-9a0186a340f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "seen", "source": "https://t.me/CVEhub/14537", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2023-23488-pmpro-2.8*\nGithub: https://github.com/cybfar/CVE-2023-23488-pmpro-2.8", "creation_timestamp": "2026-07-29T12:00:25.856670Z"}, {"uuid": "033cc39d-0cb7-4a9b-bd95-6f0b000a2a8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "seen", "source": "https://t.me/CVEhub/10211", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2023-23488-PoC*\nGithub: https://github.com/r3nt0n/CVE-2023-23488-PoC", "creation_timestamp": "2026-07-29T12:00:40.212668Z"}, {"uuid": "b3990651-9606-4262-8b51-3ac2a28c9068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "seen", "source": "https://t.me/CVEhub/14537", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2023-23488-pmpro-2.8*\nGithub: https://github.com/cybfar/CVE-2023-23488-pmpro-2.8", "creation_timestamp": "2026-07-30T00:00:47.956997Z"}, {"uuid": "f64133c4-72f7-4236-b3d7-fed282cfeac3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "seen", "source": "https://t.me/CVEhub/10211", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2023-23488-PoC*\nGithub: https://github.com/r3nt0n/CVE-2023-23488-PoC", "creation_timestamp": "2026-07-30T00:01:09.515854Z"}, {"uuid": "169bc322-e2e4-4475-a239-906fc934561c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "seen", "source": "https://t.me/cissp/6663", "content": "exploit\n1. CVE-2020-2546, CVE-2020-2915,\nCVE-2020-2801, CVE-2020-2798,\nCVE-2020-2883, CVE-2020-2884,\nCVE-2020-2950:\nWebLogic T3 payload exploit PoC python3\nhttps://github.com/hktalent/CVE_2020_2546\n\n2. Tips, Tricks, and Scripts for Linux Post Exploitation\nhttps://github.com/regorsec/Linux-Post-Exploitation\n\n3. CVE-2023-23488:\nUnauthenticated SQL Injection - Paid Memberships Pro < 2.9.8 (WordPress Plugin)\nhttps://github.com/r3nt0n/CVE-2023-23488-PoC\n\n4\ud83e\udd78. CVE-2023-23397:\nMicrosoft Outlook EoP Vulnerability\nhttps://www.mdsec.co.uk/2023/03/exploiting-cve-2023-23397-microsoft-outlook-elevation-of-privilege-vulnerability\n]-> 0-day: https://github.com/sqrtZeroKnowledge/CVE-2023-23397_EXPLOIT_0DAY\n\n5. Producing a PoC for CVE-2022-42475 (Fortinet RCE)\nhttps://blog.scrt.ch/2023/03/14/producing-a-poc-for-cve-2022-42475-fortinet-rce\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.12.25", "creation_timestamp": "2026-09-01T17:00:21.622175Z"}, {"uuid": "3264eb07-24e3-4b9b-806e-3fc258e1e689", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "seen", "source": "https://t.me/hacking_Attack/85447", "content": "Black Hat Ethical Hacking\nPoC exploits released for critical bugs in popular WordPress plugins\n\nPoC exploits released for critical bugs in popular WordPress pluginsPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes Three popular WordPress plugins with tens of thousands of active installations are vulnerable to high-severity or critical SQL injection vulnerabilities, with proof-of-concept exploits now publicly available.SQL injection is a website security flaw that allows attackers to input data into form fields or via URLs that modify legitimate database queries to return different data or modify a database.\n\nDepending on the website code being vulnerable to a SQL injection flaw, an attacker could modify or delete data to a site, inject malicious scripts, or gain full access to the website.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses Proof of Concept exploits released The three vulnerable plugins were discovered by Tenable\u00a0security researcher Joshua Martinelle, who reported them responsibly to WordPress on December 19, 2022, along with proofs of concept (PoCs).\n\nThe authors of the plugins released security updates to address the issues in the following days or weeks, so all problems have been fixed now, and those running the latest available version are no longer vulnerable.\n\nYesterday, the researcher disclosed technical details about each vulnerability with proof of concept exploits using the SLEEP function to demonstrate how the flaws work.\n\nThe first plugin that was found to be vulnerable to SQL injection is \u2018Paid Memberships Pro,\u2019 a membership and subscriptions management tool used in over 100,000 websites.\n\n\u201cThe plugin does not escape the \u2018code\u2019 parameter in the /pmpro/v1/order REST route before using it in a SQL statement, leading to an unauthenticated SQL injection vulnerability,\u201d reveals Tenable\u2019s post.\n\nThe flaw is tracked as CVE-2023-23488, receiving a CVSSv3 severity rating of 9.8 (critical), and it affects all versions of the plugin older than 2.9.8. Paid Memberships Pro fixed the vulnerability on December 27, 2022, with the release of version 2.9.8.\nhttps://www.bleepstatic.com/images/news/u/1220909/2023/WordPress/1/curl.png \n<figcaptionProvided example of a test attack leveraging CVE-2023-23488 (Tenable) \nThe second WordPress add-on vulnerable to SQL injection is \u2018Easy Digital Downloads,\u2019 an e-commerce solution for selling digital files with over 50,000 active installations.\n\n\u201cThe plugin does not escape the \u2018s\u2019 parameter in the \u2018edd_download_search\u2019 action before using it in a SQL statement, leading to an unauthenticated SQL injection vulnerability,\u201d explains Tenable.\n\n\u201cThe vulnerable part of the code corresponds to the \u2018edd_ajax_download_search()\u2019 function of the \u2018./includes/ajax-functions.php\u2019 file.\u201d\n\nThe vulnerability is tracked as CVE-2023-23489 and has received a CVSSv3 severity rating of 9.8, categorizing it as critical. The flaw impacts all versions below 3.1.0.4, released on January 5, 2023.\n\nFinally, Tenable discovered CVE-2023-23490, a \u2018high-severity\u2019 SQL injection flaw in \u2018Survey Marker,\u2019 a WordPress plugin used by 3,000 websites for surveys and market research.\nTrending: Common and Uncommon types of SQL Injection Trending: Offensive Security Tool: Freeze\nThe flaw received a severity rating of 8.8, according to the CVSS v3, because the attacker has to be authenticated as at least a subscriber to exploit it.\n\nHowever, this prerequisite is usually easy to fulfill, as many websites allow visitors to register as members.\n\nSurvey Marker was the quickest vendor to respond to Tenable\u2019s SQL injection[...]", "creation_timestamp": "2026-09-01T20:01:06.714290Z"}, {"uuid": "53d40966-da74-470e-870c-a562eff49dc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23489", "type": "seen", "source": "https://t.me/hacking_Attack/85447", "content": "Black Hat Ethical Hacking\nPoC exploits released for critical bugs in popular WordPress plugins\n\nPoC exploits released for critical bugs in popular WordPress pluginsPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes Three popular WordPress plugins with tens of thousands of active installations are vulnerable to high-severity or critical SQL injection vulnerabilities, with proof-of-concept exploits now publicly available.SQL injection is a website security flaw that allows attackers to input data into form fields or via URLs that modify legitimate database queries to return different data or modify a database.\n\nDepending on the website code being vulnerable to a SQL injection flaw, an attacker could modify or delete data to a site, inject malicious scripts, or gain full access to the website.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses Proof of Concept exploits released The three vulnerable plugins were discovered by Tenable\u00a0security researcher Joshua Martinelle, who reported them responsibly to WordPress on December 19, 2022, along with proofs of concept (PoCs).\n\nThe authors of the plugins released security updates to address the issues in the following days or weeks, so all problems have been fixed now, and those running the latest available version are no longer vulnerable.\n\nYesterday, the researcher disclosed technical details about each vulnerability with proof of concept exploits using the SLEEP function to demonstrate how the flaws work.\n\nThe first plugin that was found to be vulnerable to SQL injection is \u2018Paid Memberships Pro,\u2019 a membership and subscriptions management tool used in over 100,000 websites.\n\n\u201cThe plugin does not escape the \u2018code\u2019 parameter in the /pmpro/v1/order REST route before using it in a SQL statement, leading to an unauthenticated SQL injection vulnerability,\u201d reveals Tenable\u2019s post.\n\nThe flaw is tracked as CVE-2023-23488, receiving a CVSSv3 severity rating of 9.8 (critical), and it affects all versions of the plugin older than 2.9.8. Paid Memberships Pro fixed the vulnerability on December 27, 2022, with the release of version 2.9.8.\nhttps://www.bleepstatic.com/images/news/u/1220909/2023/WordPress/1/curl.png \n<figcaptionProvided example of a test attack leveraging CVE-2023-23488 (Tenable) \nThe second WordPress add-on vulnerable to SQL injection is \u2018Easy Digital Downloads,\u2019 an e-commerce solution for selling digital files with over 50,000 active installations.\n\n\u201cThe plugin does not escape the \u2018s\u2019 parameter in the \u2018edd_download_search\u2019 action before using it in a SQL statement, leading to an unauthenticated SQL injection vulnerability,\u201d explains Tenable.\n\n\u201cThe vulnerable part of the code corresponds to the \u2018edd_ajax_download_search()\u2019 function of the \u2018./includes/ajax-functions.php\u2019 file.\u201d\n\nThe vulnerability is tracked as CVE-2023-23489 and has received a CVSSv3 severity rating of 9.8, categorizing it as critical. The flaw impacts all versions below 3.1.0.4, released on January 5, 2023.\n\nFinally, Tenable discovered CVE-2023-23490, a \u2018high-severity\u2019 SQL injection flaw in \u2018Survey Marker,\u2019 a WordPress plugin used by 3,000 websites for surveys and market research.\nTrending: Common and Uncommon types of SQL Injection Trending: Offensive Security Tool: Freeze\nThe flaw received a severity rating of 8.8, according to the CVSS v3, because the attacker has to be authenticated as at least a subscriber to exploit it.\n\nHowever, this prerequisite is usually easy to fulfill, as many websites allow visitors to register as members.\n\nSurvey Marker was the quickest vendor to respond to Tenable\u2019s SQL injection[...]", "creation_timestamp": "2026-09-01T20:01:06.882852Z"}, {"uuid": "af3707c7-74a5-4aeb-a5bf-c2491ed0a0a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "seen", "source": "https://t.me/hacking_Attack/85447", "content": "Black Hat Ethical Hacking\nPoC exploits released for critical bugs in popular WordPress plugins\n\nPoC exploits released for critical bugs in popular WordPress pluginsPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes Three popular WordPress plugins with tens of thousands of active installations are vulnerable to high-severity or critical SQL injection vulnerabilities, with proof-of-concept exploits now publicly available.SQL injection is a website security flaw that allows attackers to input data into form fields or via URLs that modify legitimate database queries to return different data or modify a database.\n\nDepending on the website code being vulnerable to a SQL injection flaw, an attacker could modify or delete data to a site, inject malicious scripts, or gain full access to the website.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses Proof of Concept exploits released The three vulnerable plugins were discovered by Tenable\u00a0security researcher Joshua Martinelle, who reported them responsibly to WordPress on December 19, 2022, along with proofs of concept (PoCs).\n\nThe authors of the plugins released security updates to address the issues in the following days or weeks, so all problems have been fixed now, and those running the latest available version are no longer vulnerable.\n\nYesterday, the researcher disclosed technical details about each vulnerability with proof of concept exploits using the SLEEP function to demonstrate how the flaws work.\n\nThe first plugin that was found to be vulnerable to SQL injection is \u2018Paid Memberships Pro,\u2019 a membership and subscriptions management tool used in over 100,000 websites.\n\n\u201cThe plugin does not escape the \u2018code\u2019 parameter in the /pmpro/v1/order REST route before using it in a SQL statement, leading to an unauthenticated SQL injection vulnerability,\u201d reveals Tenable\u2019s post.\n\nThe flaw is tracked as CVE-2023-23488, receiving a CVSSv3 severity rating of 9.8 (critical), and it affects all versions of the plugin older than 2.9.8. Paid Memberships Pro fixed the vulnerability on December 27, 2022, with the release of version 2.9.8.\nhttps://www.bleepstatic.com/images/news/u/1220909/2023/WordPress/1/curl.png \n<figcaptionProvided example of a test attack leveraging CVE-2023-23488 (Tenable) \nThe second WordPress add-on vulnerable to SQL injection is \u2018Easy Digital Downloads,\u2019 an e-commerce solution for selling digital files with over 50,000 active installations.\n\n\u201cThe plugin does not escape the \u2018s\u2019 parameter in the \u2018edd_download_search\u2019 action before using it in a SQL statement, leading to an unauthenticated SQL injection vulnerability,\u201d explains Tenable.\n\n\u201cThe vulnerable part of the code corresponds to the \u2018edd_ajax_download_search()\u2019 function of the \u2018./includes/ajax-functions.php\u2019 file.\u201d\n\nThe vulnerability is tracked as CVE-2023-23489 and has received a CVSSv3 severity rating of 9.8, categorizing it as critical. The flaw impacts all versions below 3.1.0.4, released on January 5, 2023.\n\nFinally, Tenable discovered CVE-2023-23490, a \u2018high-severity\u2019 SQL injection flaw in \u2018Survey Marker,\u2019 a WordPress plugin used by 3,000 websites for surveys and market research.\nTrending: Common and Uncommon types of SQL Injection Trending: Offensive Security Tool: Freeze\nThe flaw received a severity rating of 8.8, according to the CVSS v3, because the attacker has to be authenticated as at least a subscriber to exploit it.\n\nHowever, this prerequisite is usually easy to fulfill, as many websites allow visitors to register as members.\n\nSurvey Marker was the quickest vendor to respond to Tenable\u2019s SQL injection[...]", "creation_timestamp": "2026-09-02T01:01:27.508521Z"}, {"uuid": "696f3fd1-35d5-4e40-869a-a3bdcf9d14fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23489", "type": "seen", "source": "https://t.me/hacking_Attack/85447", "content": "Black Hat Ethical Hacking\nPoC exploits released for critical bugs in popular WordPress plugins\n\nPoC exploits released for critical bugs in popular WordPress pluginsPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes Three popular WordPress plugins with tens of thousands of active installations are vulnerable to high-severity or critical SQL injection vulnerabilities, with proof-of-concept exploits now publicly available.SQL injection is a website security flaw that allows attackers to input data into form fields or via URLs that modify legitimate database queries to return different data or modify a database.\n\nDepending on the website code being vulnerable to a SQL injection flaw, an attacker could modify or delete data to a site, inject malicious scripts, or gain full access to the website.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses Proof of Concept exploits released The three vulnerable plugins were discovered by Tenable\u00a0security researcher Joshua Martinelle, who reported them responsibly to WordPress on December 19, 2022, along with proofs of concept (PoCs).\n\nThe authors of the plugins released security updates to address the issues in the following days or weeks, so all problems have been fixed now, and those running the latest available version are no longer vulnerable.\n\nYesterday, the researcher disclosed technical details about each vulnerability with proof of concept exploits using the SLEEP function to demonstrate how the flaws work.\n\nThe first plugin that was found to be vulnerable to SQL injection is \u2018Paid Memberships Pro,\u2019 a membership and subscriptions management tool used in over 100,000 websites.\n\n\u201cThe plugin does not escape the \u2018code\u2019 parameter in the /pmpro/v1/order REST route before using it in a SQL statement, leading to an unauthenticated SQL injection vulnerability,\u201d reveals Tenable\u2019s post.\n\nThe flaw is tracked as CVE-2023-23488, receiving a CVSSv3 severity rating of 9.8 (critical), and it affects all versions of the plugin older than 2.9.8. Paid Memberships Pro fixed the vulnerability on December 27, 2022, with the release of version 2.9.8.\nhttps://www.bleepstatic.com/images/news/u/1220909/2023/WordPress/1/curl.png \n<figcaptionProvided example of a test attack leveraging CVE-2023-23488 (Tenable) \nThe second WordPress add-on vulnerable to SQL injection is \u2018Easy Digital Downloads,\u2019 an e-commerce solution for selling digital files with over 50,000 active installations.\n\n\u201cThe plugin does not escape the \u2018s\u2019 parameter in the \u2018edd_download_search\u2019 action before using it in a SQL statement, leading to an unauthenticated SQL injection vulnerability,\u201d explains Tenable.\n\n\u201cThe vulnerable part of the code corresponds to the \u2018edd_ajax_download_search()\u2019 function of the \u2018./includes/ajax-functions.php\u2019 file.\u201d\n\nThe vulnerability is tracked as CVE-2023-23489 and has received a CVSSv3 severity rating of 9.8, categorizing it as critical. The flaw impacts all versions below 3.1.0.4, released on January 5, 2023.\n\nFinally, Tenable discovered CVE-2023-23490, a \u2018high-severity\u2019 SQL injection flaw in \u2018Survey Marker,\u2019 a WordPress plugin used by 3,000 websites for surveys and market research.\nTrending: Common and Uncommon types of SQL Injection Trending: Offensive Security Tool: Freeze\nThe flaw received a severity rating of 8.8, according to the CVSS v3, because the attacker has to be authenticated as at least a subscriber to exploit it.\n\nHowever, this prerequisite is usually easy to fulfill, as many websites allow visitors to register as members.\n\nSurvey Marker was the quickest vendor to respond to Tenable\u2019s SQL injection[...]", "creation_timestamp": "2026-09-02T01:01:27.763033Z"}, {"uuid": "b6048c75-5f4a-4cd7-9ffd-fda7bba2e82c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "seen", "source": "https://t.me/cissp/6663", "content": "exploit\n1. CVE-2020-2546, CVE-2020-2915,\nCVE-2020-2801, CVE-2020-2798,\nCVE-2020-2883, CVE-2020-2884,\nCVE-2020-2950:\nWebLogic T3 payload exploit PoC python3\nhttps://github.com/hktalent/CVE_2020_2546\n\n2. Tips, Tricks, and Scripts for Linux Post Exploitation\nhttps://github.com/regorsec/Linux-Post-Exploitation\n\n3. CVE-2023-23488:\nUnauthenticated SQL Injection - Paid Memberships Pro < 2.9.8 (WordPress Plugin)\nhttps://github.com/r3nt0n/CVE-2023-23488-PoC\n\n4\ud83e\udd78. CVE-2023-23397:\nMicrosoft Outlook EoP Vulnerability\nhttps://www.mdsec.co.uk/2023/03/exploiting-cve-2023-23397-microsoft-outlook-elevation-of-privilege-vulnerability\n]-> 0-day: https://github.com/sqrtZeroKnowledge/CVE-2023-23397_EXPLOIT_0DAY\n\n5. Producing a PoC for CVE-2022-42475 (Fortinet RCE)\nhttps://blog.scrt.ch/2023/03/14/producing-a-poc-for-cve-2022-42475-fortinet-rce\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.12.25", "creation_timestamp": "2026-09-02T01:04:02.315272Z"}, {"uuid": "a251b080-ebc1-4a21-b370-f9c1bcb6faa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/85447", "content": "Black Hat Ethical Hacking\nPoC exploits released for critical bugs in popular WordPress plugins\n\nPoC exploits released for critical bugs in popular WordPress pluginsPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes Three popular WordPress plugins with tens of thousands of active installations are vulnerable to high-severity or critical SQL injection vulnerabilities, with proof-of-concept exploits now publicly available.SQL injection is a website security flaw that allows attackers to input data into form fields or via URLs that modify legitimate database queries to return different data or modify a database.\n\nDepending on the website code being vulnerable to a SQL injection flaw, an attacker could modify or delete data to a site, inject malicious scripts, or gain full access to the website.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses Proof of Concept exploits released The three vulnerable plugins were discovered by Tenable\u00a0security researcher Joshua Martinelle, who reported them responsibly to WordPress on December 19, 2022, along with proofs of concept (PoCs).\n\nThe authors of the plugins released security updates to address the issues in the following days or weeks, so all problems have been fixed now, and those running the latest available version are no longer vulnerable.\n\nYesterday, the researcher disclosed technical details about each vulnerability with proof of concept exploits using the SLEEP function to demonstrate how the flaws work.\n\nThe first plugin that was found to be vulnerable to SQL injection is \u2018Paid Memberships Pro,\u2019 a membership and subscriptions management tool used in over 100,000 websites.\n\n\u201cThe plugin does not escape the \u2018code\u2019 parameter in the /pmpro/v1/order REST route before using it in a SQL statement, leading to an unauthenticated SQL injection vulnerability,\u201d reveals Tenable\u2019s post.\n\nThe flaw is tracked as CVE-2023-23488, receiving a CVSSv3 severity rating of 9.8 (critical), and it affects all versions of the plugin older than 2.9.8. Paid Memberships Pro fixed the vulnerability on December 27, 2022, with the release of version 2.9.8.\nhttps://www.bleepstatic.com/images/news/u/1220909/2023/WordPress/1/curl.png \n<figcaptionProvided example of a test attack leveraging CVE-2023-23488 (Tenable) \nThe second WordPress add-on vulnerable to SQL injection is \u2018Easy Digital Downloads,\u2019 an e-commerce solution for selling digital files with over 50,000 active installations.\n\n\u201cThe plugin does not escape the \u2018s\u2019 parameter in the \u2018edd_download_search\u2019 action before using it in a SQL statement, leading to an unauthenticated SQL injection vulnerability,\u201d explains Tenable.\n\n\u201cThe vulnerable part of the code corresponds to the \u2018edd_ajax_download_search()\u2019 function of the \u2018./includes/ajax-functions.php\u2019 file.\u201d\n\nThe vulnerability is tracked as CVE-2023-23489 and has received a CVSSv3 severity rating of 9.8, categorizing it as critical. The flaw impacts all versions below 3.1.0.4, released on January 5, 2023.\n\nFinally, Tenable discovered CVE-2023-23490, a \u2018high-severity\u2019 SQL injection flaw in \u2018Survey Marker,\u2019 a WordPress plugin used by 3,000 websites for surveys and market research.\nTrending: Common and Uncommon types of SQL Injection Trending: Offensive Security Tool: Freeze\nThe flaw received a severity rating of 8.8, according to the CVSS v3, because the attacker has to be authenticated as at least a subscriber to exploit it.\n\nHowever, this prerequisite is usually easy to fulfill, as many websites allow visitors to register as members.\n\nSurvey Marker was the quickest vendor to respond to Tenable\u2019s SQL injection[...]", "creation_timestamp": "2026-09-05T00:00:10.945967Z"}, {"uuid": "4f212143-1989-44ed-9b28-a0fb244fcc43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23489", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/85447", "content": "Black Hat Ethical Hacking\nPoC exploits released for critical bugs in popular WordPress plugins\n\nPoC exploits released for critical bugs in popular WordPress pluginsPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes Three popular WordPress plugins with tens of thousands of active installations are vulnerable to high-severity or critical SQL injection vulnerabilities, with proof-of-concept exploits now publicly available.SQL injection is a website security flaw that allows attackers to input data into form fields or via URLs that modify legitimate database queries to return different data or modify a database.\n\nDepending on the website code being vulnerable to a SQL injection flaw, an attacker could modify or delete data to a site, inject malicious scripts, or gain full access to the website.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses Proof of Concept exploits released The three vulnerable plugins were discovered by Tenable\u00a0security researcher Joshua Martinelle, who reported them responsibly to WordPress on December 19, 2022, along with proofs of concept (PoCs).\n\nThe authors of the plugins released security updates to address the issues in the following days or weeks, so all problems have been fixed now, and those running the latest available version are no longer vulnerable.\n\nYesterday, the researcher disclosed technical details about each vulnerability with proof of concept exploits using the SLEEP function to demonstrate how the flaws work.\n\nThe first plugin that was found to be vulnerable to SQL injection is \u2018Paid Memberships Pro,\u2019 a membership and subscriptions management tool used in over 100,000 websites.\n\n\u201cThe plugin does not escape the \u2018code\u2019 parameter in the /pmpro/v1/order REST route before using it in a SQL statement, leading to an unauthenticated SQL injection vulnerability,\u201d reveals Tenable\u2019s post.\n\nThe flaw is tracked as CVE-2023-23488, receiving a CVSSv3 severity rating of 9.8 (critical), and it affects all versions of the plugin older than 2.9.8. Paid Memberships Pro fixed the vulnerability on December 27, 2022, with the release of version 2.9.8.\nhttps://www.bleepstatic.com/images/news/u/1220909/2023/WordPress/1/curl.png \n<figcaptionProvided example of a test attack leveraging CVE-2023-23488 (Tenable) \nThe second WordPress add-on vulnerable to SQL injection is \u2018Easy Digital Downloads,\u2019 an e-commerce solution for selling digital files with over 50,000 active installations.\n\n\u201cThe plugin does not escape the \u2018s\u2019 parameter in the \u2018edd_download_search\u2019 action before using it in a SQL statement, leading to an unauthenticated SQL injection vulnerability,\u201d explains Tenable.\n\n\u201cThe vulnerable part of the code corresponds to the \u2018edd_ajax_download_search()\u2019 function of the \u2018./includes/ajax-functions.php\u2019 file.\u201d\n\nThe vulnerability is tracked as CVE-2023-23489 and has received a CVSSv3 severity rating of 9.8, categorizing it as critical. The flaw impacts all versions below 3.1.0.4, released on January 5, 2023.\n\nFinally, Tenable discovered CVE-2023-23490, a \u2018high-severity\u2019 SQL injection flaw in \u2018Survey Marker,\u2019 a WordPress plugin used by 3,000 websites for surveys and market research.\nTrending: Common and Uncommon types of SQL Injection Trending: Offensive Security Tool: Freeze\nThe flaw received a severity rating of 8.8, according to the CVSS v3, because the attacker has to be authenticated as at least a subscriber to exploit it.\n\nHowever, this prerequisite is usually easy to fulfill, as many websites allow visitors to register as members.\n\nSurvey Marker was the quickest vendor to respond to Tenable\u2019s SQL injection[...]", "creation_timestamp": "2026-09-05T00:00:10.894042Z"}, {"uuid": "56c47866-ddad-467b-aac3-e4ba8a9a0d17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23489", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-05)", "content": "", "creation_timestamp": "2026-09-06T10:15:12.165045Z"}]}