CVE-2023-5203

7.5 highEPSS 2.2%

High (7.5) in swit wp sessions time monitoring full automatic. EPSS 2.2% chance of exploitation in the next 30 days.

The WP Sessions Time Monitoring Full Automatic WordPress plugin before 1.0.9 does not sanitize the request URL or query parameters before using them in an SQL query, allowing unauthenticated attackers to extract sensitive data from the database via blind time based SQL injection techniques, or in some cases an error/union based technique.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2023-12-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

swit:wp_sessions_time_monitoring_full_automatic

References

https://wpscan.com/vulnerability/7f4f505b-2667-4e0f-9841-9c1cd0831932
https://wpscan.com/vulnerability/7f4f505b-2667-4e0f-9841-9c1cd0831932

Check your stack JSON