Skip to content
OpenAdvisories

Product · hijiri

Intuitive Custom Post Order

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.6
    CVE-2023-1016

    Intuitive Custom Post Order <= 3.1.4.1 - Authenticated (Admin+) SQL Injection

    The Intuitive Custom Post Order plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 3.1.4.1, due to insufficient escaping on the user supplied 'objects' and 'tags' parameters and lack of sufficient preparation in the 'update_…

    hijiri Intuitive Custom Post Order Web / CMS