CVE-2023-2636

HIGH

AN_GradeBook <5.0.1 - SQL Injection

Title source: llm

Description

The AN_GradeBook WordPress plugin through 5.0.1 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as subscriber

Exploits (2)

exploitdb WORKING POC VERIFIED
by Lukas Kinneberg · pythonwebappsphp
https://www.exploit-db.com/exploits/51632
nomisec WORKING POC 1 stars
by lukinneberg · poc
https://github.com/lukinneberg/CVE-2023-2636

References (2)

Scores

CVSS v3 8.8
EPSS 0.0460
EPSS Percentile 89.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-89
Status published
Products (1)
an_gradebook_project/an_gradebook < 5.0.1
Published Jul 17, 2023
Tracked Since Feb 18, 2026