What is CVE-2023-5203?

CVE-2023-5203 is a high-severity vulnerability in Swit Wp Sessions Time Monitoring Full Automatic, classified under SQL Injection. CVSS score: 7.5/10. Published 2023-12-26.

How severe is CVE-2023-5203?

High severity. CVSS v3 base score is 7.5 out of 10.

Is CVE-2023-5203 known to be exploited?

3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

SQL Injection in Swit Wp Sessions Time Monitoring Full Automatic

CVE-2023-5203

The WP Sessions Time Monitoring Full Automatic WordPress plugin before 1.0.9 does not sanitize the request URL or query parameters before using them in an SQL query, allowing unauthenticated attackers to extract sensitive data from the database via blind time based SQL injection techniques, or in some cases an error/union based technique.

Vulnerability class: SQL Injection

EPSS: 0.022 (80.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Swit Wp_sessions_time_monitoring_full_automatic
Unknown Wp Sessions Time Monitoring Full Automatic — versions 0

Weakness classification (CWE)

CWE-89 — SQL Injection

Public proof-of-concept exploits

References

contact@wpscan.com (Exploit, technical-description, exploit, vdb-entry)

Frequently asked questions

What is CVE-2023-5203?: CVE-2023-5203 is a high-severity vulnerability in Swit Wp Sessions Time Monitoring Full Automatic, classified under SQL Injection. CVSS score: 7.5/10. Published 2023-12-26.
How severe is CVE-2023-5203?: High severity. CVSS v3 base score is 7.5 out of 10.
Is CVE-2023-5203 known to be exploited?: 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.