High · 7.2 CVE-2023-1207 EUVD-2023-23486GHSA-qh8g-3pfr-79x6

HTTP Headers < 1.18.8 - Admin+ SQL Injection

Published May 15, 2023 · Updated Jan 24, 2025 · Assigned by WPScan

Description

This HTTP Headers WordPress plugin before 1.18.8 has an import functionality which executes arbitrary SQL on the server, leading to an SQL Injection vulnerability.

Affected products

Vendor	Product	Affected	Fixed
—	HTTP Headers	< 1.18.8	1.18.8

References

https://wpscan.com/vulnerability/6f3f460b-542a-4d32-8feb-afa1aef57e37 exploit vdb-entry technical-description