Vulnerability · Published May 2, 2023 · Assigned by WPScan

CVE-2023-1730SupportCandy < 3.1.5 - Unauthenticated SQLi

Critical 9.8

In plain English

A critical-severity SQL injection in SupportCandy from Unknown. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 40.6% (higher than 99% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)40.6%top 1.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack tooling1Nuclei

Official description

The SupportCandy WordPress plugin before 3.1.5 does not validate and escape user input before using it in an SQL statement, which could allow unauthenticated attackers to perform SQL injection attacks

Affected products (as reported)

Vendor	Product	Versions
Unknown	SupportCandy	0 – before 3.1.5

Weakness: CWE-89 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

https://wpscan.com/vulnerability/44b51a56-ff05-4d50-9327-fc9bab74d4b7 exploit, vdb-entry, technical-description