High severity8.8NVD Advisory· Published May 8, 2023· Updated Jun 17, 2026
CVE-2023-0768
CVE-2023-0768
Description
The Avirato hotels online booking engine WordPress plugin through 5.0.5 does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could allow any authenticated users, such as subscriber to perform SQL Injection attacks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <=5.0.5
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.