CVE-2023-2493 — All In One Redirection < 2.2.0 - Admin+ SQLi
The All In One Redirection WordPress plugin before 2.2.0 does not properly sanitise and escape multiple parameters before using them in an SQL statement, leading to a SQL inject…
Published: 2023-07-10 · CVSS: Unscored
The All In One Redirection WordPress plugin before 2.2.0 does not properly sanitise and escape multiple parameters before using them in an SQL statement, leading to a SQL injection exploitable by high privilege users such as admin.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7