Vulnerability · Published Apr 17, 2023 · Assigned by WPScan
CVE-2023-0765Gallery by BestWebSoft < 4.7.0 - Author+ SQL Injection
High 8.8
In plain English
A high-severity SQL injection in Gallery by BestWebSoft from Unknown. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 59% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.9%top 40.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not properly escape values used in SQL queries, leading to an Blind SQL Injection vulnerability. The attacker must have at least the privileges of an Author, and the vendor's Slider plugin (https://wordpress.org/plugins/slider-bws/) must also be installed for this vulnerability to be exploitable.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Unknown | Gallery by BestWebSoft | 0 – before 4.7.0 |
Weakness: CWE-89 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- https://wpscan.com/vulnerability/2699cefa-1cae-4ef3-ad81-7f3db3fcce25 exploit, vdb-entry, technical-description