The Paid Memberships Pro WordPress Plugin, version < 2.9.8, is affected by an unauthenticated SQL injection vulnerability in the 'code' parameter of the '/pmpro/v1/order' REST route.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: tenable
Published: 2023-01-20T00:00:00
Updated: 2023-04-03T00:00:00
Reserved: 2023-01-12T00:00:00
Link: CVE-2023-23488
JSON object: View
NVD Information
Status : Modified
Published: 2023-01-20T18:15:10.470
Modified: 2023-04-03T20:15:08.673
Link: CVE-2023-23488
JSON object: View
Redhat Information
No data.
CWE