Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 16:08:21 +0000 CVE-2023-6373 — ArtPlacer Widget < 2.20.7 - Editor+ SQLi https://cve.radiocsirt.org/vuln/cve-2023-6373 <p><strong>Affected:</strong> Unknown ArtPlacer Widget</p> <p>The ArtPlacer Widget WordPress plugin before 2.20.7 does not sanitize and escape the &#34;id&#34; parameter before submitting the query, leading to a SQLI exploitable by editors and above. Note: Due to the lack of CSRF check, the issue could also be exploited via a CSRF against a logged editor (or above)</p> <p><strong>Affected:</strong> Unknown ArtPlacer Widget</p> <p>The ArtPlacer Widget WordPress plugin before 2.20.7 does not sanitize and escape the &#34;id&#34; parameter before submitting the query, leading to a SQLI exploitable by editors and above. Note: Due to the lack of CSRF check, the issue could also be exploited via a CSRF against a logged editor (or above)</p> https://cve.radiocsirt.org/vuln/cve-2023-6373