CVE-2023-0329
High · 7.2CVSS
7.2
EPSS
19.7%
Published
May 30, 2023
CISA due date
—
The record
The Elementor Website Builder WordPress plugin before 3.12.2 does not properly sanitize and escape the Replace URL parameter in the Tools module before using it in a SQL statement, leading to a SQL injection exploitable by users with the Administrator role.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|