High severity8.8NVD Advisory· Published Feb 13, 2023· Updated Jun 17, 2026
CVE-2023-0220
CVE-2023-0220
Description
The Pinpoint Booking System WordPress plugin before 2.9.9.2.9 does not validate and escape one of its shortcode attributes before using it in a SQL statement, which could allow any authenticated users, such as subscriber to perform SQL Injection attacks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <2.9.9.2.9
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/d6d976be-31d1-419d-8729-4a36fbd2755cnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.