CVE-2023-0381 (published 2023-02-27T15:24:32.174Z)
The GigPress WordPress plugin through 2.3.28 does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could allow any authenticated users, such as subscriber to perform SQL Injection attacks
Affected products: Vendor: Unknown
Product: GigPress
Versions: 0