CVE-2023-32508

HIGH

Order Your Posts Manually < 2.2.5 - SQL Injection

Title source: llm

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Rolf van Gelder Order Your Posts Manually allows SQL Injection.This issue affects Order Your Posts Manually: from n/a through 2.2.5.

References (2)

Core 2

Core References

Vdb Entry vdb-entry

https://patchstack.com/database/Wordpress/Plugin/order-your-posts-manually/vulnerability/wordpress-order-your-posts-manually-plugin-2-2-5-sql-injection-vulnerability?_s_id=cve

Third Party Advisory vdb-entry

https://patchstack.com/database/vulnerability/order-your-posts-manually/wordpress-order-your-posts-manually-plugin-2-2-5-sql-injection-vulnerability?_s_id=cve

Scores

CVSS v3 7.6

EPSS 0.0068

EPSS Percentile 48.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-89

Status published

Products (3)

cageehv/Order Your Posts Manually < 2.2.5

cagewebdev/order_your_posts_manually < 2.2.5

Rolf van Gelder/Order Your Posts Manually < 2.2.5

Published Nov 03, 2023

Tracked Since Feb 18, 2026