GHSA-87fg-9x5w-j3rm

MainWP Dashboard SQL Command Injection vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2023-38519

Packages

Ecosystem	Package	Affected	Fixed in
Packagist	mainwp/mainwp	< 4.4.3.4	4.4.3.4

Details

As written in the advisory (Markdown source, shown as plain text).

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MainWP MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance.This issue affects MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance: from n/a through 4.4.3.3.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2023-38519 advisory
https://github.com/mainwp/mainwp/commit/8df951c0e8b2c2646cc57fc66b00767551cac400 web
https://github.com/mainwp/mainwp package
https://patchstack.com/database/vulnerability/mainwp/wordpress-mainwp-plugin-4-4-3-3-sql-injection-vulnerability?_s_id=cve web