High severity7.5NVD Advisory· Published Dec 26, 2023· Updated Jun 17, 2026

CVE-2023-5203

Description

The WP Sessions Time Monitoring Full Automatic WordPress plugin before 1.0.9 does not sanitize the request URL or query parameters before using them in an SQL query, allowing unauthenticated attackers to extract sensitive data from the database via blind time based SQL injection techniques, or in some cases an error/union based technique.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/WP Sessions Time Monitoring Full Automatic WordPress plugindescription
WordPress/WP Sessions Time Monitoring Full Automaticllm-fuzzy
Range: <1.0.9

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/7f4f505b-2667-4e0f-9841-9c1cd0831932nvdExploit

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000