CVE-2023-0098 (published 2023-02-13T14:32:15.988Z)
The Simple URLs WordPress plugin before 115 does not escape some parameters before using them in various SQL statements used by AJAX actions available by any authenticated users, leading to a SQL injection exploitable by low privilege users such as subscriber.
Affected products: Vendor: Unknown
Product: Simple URLs
Versions: 0