High · 7.6 CVE-2023-33924 EUVD-2023-38074GHSA-45ch-3c88-xp9m

WordPress SIS Handball Plugin <= 1.0.45 is vulnerable to SQL Injection

Published Nov 6, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Felix Welberg Product: SIS Handball

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Felix Welberg SIS Handball allows SQL Injection.This issue affects SIS Handball: from n/a through 1.0.45.

Affected products

Vendor	Product	Affected	Fixed
Felix Welberg	SIS Handball	≤ 1.0.45	—

References

https://patchstack.com/database/vulnerability/sis-handball/wordpress-sis-handball-plugin-1-0-45-sql-injection-vulnerability?_s_id=cve vdb-entry