High severity8.8NVD Advisory· Published Jan 17, 2024· Updated Jun 17, 2026
CVE-2023-5041
CVE-2023-5041
Description
The Track The Click WordPress plugin before 0.3.12 does not properly sanitize query parameters to the stats REST endpoint before using them in a database query, allowing a logged in user with an author role or higher to perform time based blind SQLi attacks on the database.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3<0.3.12+ 1 more
- (no CPE)range: <0.3.12
- (no CPE)range: <0.3.12
- cpe:2.3:a:tracktheclick:track_the_click:*:*:*:*:*:wordpress:*:*Range: <0.3.12
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/45194442-6eea-4e07-85a5-4a1e2fde3523nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.