High severity7.2NVD Advisory· Published Jun 5, 2023· Updated Jun 17, 2026

CVE-2023-0900

Description

The Pricing Table Builder WordPress plugin through 1.1.6 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high-privilege users such as admins.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Wpdevart/Pricing Table Builder
cpe:2.3:a:wpdevart:pricing_table_builder:*:*:*:*:*:wordpress:*:*
Range: <=1.1.6
WordPress/Pricing Tablecpe-rescue
Package: https://wordpress.org/plugins/pricing-table
WordPress/Pricing Table Builderllm-create
Range: <=1.1.6

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/f601e637-a486-4f3a-9077-4f294ace7ea1nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000