nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2023-1730 CVE-2023-1730
CRITICALNuclei
SupportCandy < 3.1.5 - Unauthenticated SQLi
Record summary
CVE-2023-1730 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.
Description
The SupportCandy WordPress plugin before 3.1.5 does not validate and escape user input before using it in an SQL statement, which could allow unauthenticated attackers to perform SQL injection attacks
Description source: CVE List
Exploitation context
Available material
- Nuclei templates
- 1
CISA SSVC decision
ExploitationPoC
AutomatableYes
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 30, 2025 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
SupportCandyDefault status: unaffected | CVE List | Before 3.1.5 | affected |
Nuclei templates
1ProjectDiscoveryCRITICALSupportCandy < 3.1.5 - Unauthenticated SQL InjectionCVSS 9.8
The SupportCandy WordPress plugin before 3.1.5 does not validate and escape user input before using it in an SQL statement, which could allow unauthenticated attackers to perform SQL injection attacks.
Impact
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL queries, potentially leading to unauthorized access, data leakage, or data manipulation.
Remediation
Fixed in version 3.1.5
WeaknessesCWE-89
Authorstheamanrawat
Template tagstime-based-sqlicve2023cvesqliwpscanwordpresssupportcandyunauthvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:supportcandy:supportcandy:*:*:*:*:*:wordpress:*:*
https://wpscan.com/vulnerability/44b51a56-ff05-4d50-9327-fc9bab74d4b7 https://wordpress.org/plugins/supportcandy/ https://nvd.nist.gov/vuln/detail/CVE-2023-1730 https://github.com/tanjiti/sec_profile
Source: ProjectDiscovery
References
2wpscan.comexploitvdb entryTechnical description
https://wpscan.com/vulnerability/44b51a56-ff05-4d50-9327-fc9bab74d4b7