CVE-2023-0277 (published 2023-04-17T12:17:40.775Z)
The WC Fields Factory WordPress plugin through 4.1.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin
Affected products: Vendor: Unknown
Product: WC Fields Factory
Versions: 0