Skip to content
OpenAdvisories
High · 7.6 CVE-2023-46823 EUVD-2023-50989GHSA-jc9g-7x7r-c8w7

WordPress ImageLinks Interactive Image Builder Plugin <= 1.5.4 is vulnerable to SQL Injection

Published Nov 6, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Avirtum ImageLinks Interactive Image Builder for WordPress allows SQL Injection.This issue affects ImageLinks Interactive Image Builder for WordPress: from n/a through 1.5.4.

Affected products

VendorProductAffectedFixed
Avirtum ImageLinks Interactive Image Builder for WordPress ≤ 1.5.4 —

References