Skip to content
OpenAdvisories
High · 7.6 CVE-2023-40215 EUVD-2023-44812GHSA-w8vv-fhxr-4vqg

WordPress Demon image annotation Plugin <= 5.1 is vulnerable to SQL Injection

Published Nov 3, 2023 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Demonisblack demon image annotation allows SQL Injection.This issue affects demon image annotation: from n/a through 5.1.

Affected products

VendorProductAffectedFixed
Demonisblack demon image annotation ≤ 5.1 —

References