High severity8.8NVD Advisory· Published Aug 16, 2023· Updated Jun 17, 2026
CVE-2023-0579
CVE-2023-0579
Description
The YARPP WordPress plugin before 5.30.3 does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could allow any authenticated users, such as subscribers to perform SQL Injection attacks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<5.30.3+ 1 more
- (no CPE)range: <5.30.3
- (no CPE)range: <5.30.3
Package: https://wordpress.org/plugins/yarpp
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/574f7607-96d8-4ef8-b96c-0425ad7e7690nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.