High · 8.5 CVE-2023-52204 EUVD-2023-56877GHSA-gwm5-99v5-pwf9

WordPress Randomize Plugin <= 1.4.3 is vulnerable to SQL Injection

Published Jan 8, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Javik Randomize.This issue affects Randomize: from n/a through 1.4.3.

Affected products

Vendor	Product	Affected	Fixed
Javik	Randomize	≤ 1.4.3	—

References

https://patchstack.com/database/vulnerability/randomize/wordpress-randomize-plugin-1-4-3-contributor-sql-injection-vulnerability?_s_id=cve vdb-entry