{"vulnerability": "cve-2023-23488", "sightings": [{"uuid": "1dd331e2-3a4c-4d06-8954-9ff1bfe7c74e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "exploited", "source": "https://www.exploit-db.com/exploits/51235", "content": "", "creation_timestamp": "2023-04-03T00:00:00.000000Z"}, {"uuid": "b463b620-c600-474c-8156-7441a228a742", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:45.000000Z"}, {"uuid": "f6f59769-100c-4660-b839-23684f022bcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:51.000000Z"}, {"uuid": "e73c4a1c-d86f-4fab-a918-d81422f73ca9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3likodqqxye2c", "content": "", "creation_timestamp": "2025-02-19T21:02:36.347606Z"}, {"uuid": "3189a8e2-7806-43b7-a47b-0fa9cf7ba1b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wp_paid_membership_pro_code_sqli.rb", "content": "", "creation_timestamp": "2023-01-19T15:57:30.000000Z"}, {"uuid": "b8e67382-7db3-47bd-825f-3824c5671598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:12:57.000000Z"}, {"uuid": "f2f252d6-92b0-4ada-8a99-ca5639d5d26f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "published-proof-of-concept", "source": "Telegram/5T9p9Zashh8_t2QaMEcrWCxGmV69ND__6VmH0ET2CJ3Gp-A", "content": "", "creation_timestamp": "2023-03-14T09:24:23.000000Z"}, {"uuid": "9a42ac9a-c9e5-4a13-9e2f-1fabbadd6630", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "seen", "source": "https://t.me/true_secator/3945", "content": "\u041f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u043f\u043b\u0430\u0433\u0438\u043d\u044b WordPress \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b. \n\n\u041e\u0448\u0438\u0431\u043a\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u043e\u043c \u0414\u0436\u043e\u0448\u0443\u0430 \u041c\u0430\u0440\u0442\u0438\u043d\u0435\u043b\u043b\u043e\u043c \u0438\u0437 Tenable, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e \u043d\u0438\u0445 WordPress 19 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430 \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 PoC.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0434\u043d\u0438, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0432\u0441\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b.\n\n\u0412\u0447\u0435\u0440\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b PoC \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041f\u0435\u0440\u0432\u044b\u0439 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u043c\u044b\u0439 \u043c\u043e\u0434\u0443\u043b\u044c - \u044d\u0442\u043e\u00a0Paid Memberships Pro, \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0447\u043b\u0435\u043d\u0441\u0442\u0432\u043e\u043c \u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u043a\u0430\u043c\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u043d\u0430 100 000 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u0430\u0445.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e Tenable, \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c \u00ab\u043a\u043e\u0434\u00bb \u0432 REST-\u0440\u043e\u0443\u0442\u0435 /pmpro/v1/order \u043f\u0435\u0440\u0435\u0434 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0435\u0433\u043e \u0432 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0435 SQL.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 CVSSv3 9,8 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-23488 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 \u0441\u0442\u0430\u0440\u0448\u0435 2.9.8, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 27 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u043d\u0430\u0434\u0441\u0442\u0440\u043e\u0439\u043a\u0430 WordPress, \u0443\u044f\u0437\u0432\u0438\u043c\u0430\u044f \u0434\u043b\u044f SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439, -\u00a0Easy Digital Downloads, \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043c\u0435\u0440\u0446\u0438\u0438, \u0438\u043c\u0435\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 50 000 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c \u00abs\u00bb \u0432 \u00abedd_download_search\u00bb \u043f\u0435\u0440\u0435\u0434 \u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0435 SQL.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-23489 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 CVSSv3 9,8.\u00a0\u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.1.0.4, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0435 5 \u044f\u043d\u0432\u0430\u0440\u044f 2023 \u0433\u043e\u0434\u0430.\n\n\u041d\u0430\u043a\u043e\u043d\u0435\u0446, Tenable \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e CVE-2023-23490 \u0432\u00a0Survey Marker, \u043f\u043b\u0430\u0433\u0438\u043d\u0435 WordPress, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u043d\u0430 3000 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u0430\u0445 \u0434\u043b\u044f \u043e\u043f\u0440\u043e\u0441\u043e\u0432 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u0440\u044b\u043d\u043a\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 8,8, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u043e\u0434\u043f\u0438\u0441\u0447\u0438\u043a\u0430. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0441 21 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433. \u0441 \u0432\u0435\u0440\u0441\u0438\u0435\u0439 3.1.2.\n\nTenable \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u043a\u0430\u043a\u043e\u0435 \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u043e\u043a\u0430\u0437\u0430\u0442\u044c \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041e\u0434\u043d\u0430\u043a\u043e, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u044c \u043e\u0448\u0438\u0431\u043e\u043a, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438.", "creation_timestamp": "2023-01-16T17:30:07.000000Z"}, {"uuid": "5a694c71-12a9-475a-acfa-1e7a5f96ee82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "seen", "source": "https://t.me/DailyToolz/582", "content": "#wts res exploit wordpress 0-day sqli 2023\n\ncve : CVE-2023-23488\nsource / news : https://vuldb.com/?ctiid.218341\n\nprice  : [ SOLD ] ty for buying", "creation_timestamp": "2023-01-15T09:28:44.000000Z"}, {"uuid": "5a3afe6b-e014-4804-acc8-fb2be7ebbb55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "seen", "source": "https://t.me/cibsecurity/56776", "content": "\u203c CVE-2023-23488 \u203c\n\nThe Paid Memberships Pro WordPress Plugin, version < 2.9.8, is affected by an unauthenticated SQL injection vulnerability in the 'code' parameter of the '/pmpro/v1/order' REST route.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-20T20:22:54.000000Z"}, {"uuid": "7e48bf36-ea82-48bc-bf48-2c81a41fb13e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/14537", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2023-23488-pmpro-2.8*\nGithub: https://github.com/cybfar/CVE-2023-23488-pmpro-2.8", "creation_timestamp": "2026-07-31T00:00:28.058288Z"}, {"uuid": "0836776c-f5e2-40f4-a331-63234dafaa4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/7921", "content": "#exploit\n1. CVE-2020-2546, CVE-2020-2915,\nCVE-2020-2801, CVE-2020-2798,\nCVE-2020-2883, CVE-2020-2884,\nCVE-2020-2950:\nWebLogic T3 payload exploit PoC python3\nhttps://github.com/hktalent/CVE_2020_2546\n\n2. Tips, Tricks, and Scripts for Linux Post Exploitation\nhttps://github.com/regorsec/Linux-Post-Exploitation\n\n3. CVE-2023-23488:\nUnauthenticated SQL Injection - Paid Memberships Pro < 2.9.8 (WordPress Plugin)\nhttps://github.com/r3nt0n/CVE-2023-23488-PoC", "creation_timestamp": "2023-03-13T22:21:06.000000Z"}, {"uuid": "fe2da74b-4917-4038-bac2-e9ce2c5f5e6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/10211", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2023-23488-PoC*\nGithub: https://github.com/r3nt0n/CVE-2023-23488-PoC", "creation_timestamp": "2026-07-31T08:00:04.903020Z"}, {"uuid": "c0cb5794-e340-449b-88d9-c607f53ff216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/10211", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2023-23488-PoC*\nGithub: https://github.com/r3nt0n/CVE-2023-23488-PoC", "creation_timestamp": "2026-08-01T00:00:38.301357Z"}, {"uuid": "d1939ada-3ab8-401b-9e4d-9a0186a340f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "seen", "source": "https://t.me/CVEhub/14537", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2023-23488-pmpro-2.8*\nGithub: https://github.com/cybfar/CVE-2023-23488-pmpro-2.8", "creation_timestamp": "2026-07-29T12:00:25.856670Z"}, {"uuid": "033cc39d-0cb7-4a9b-bd95-6f0b000a2a8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "seen", "source": "https://t.me/CVEhub/10211", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2023-23488-PoC*\nGithub: https://github.com/r3nt0n/CVE-2023-23488-PoC", "creation_timestamp": "2026-07-29T12:00:40.212668Z"}, {"uuid": "b3990651-9606-4262-8b51-3ac2a28c9068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "seen", "source": "https://t.me/CVEhub/14537", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2023-23488-pmpro-2.8*\nGithub: https://github.com/cybfar/CVE-2023-23488-pmpro-2.8", "creation_timestamp": "2026-07-30T00:00:47.956997Z"}, {"uuid": "f64133c4-72f7-4236-b3d7-fed282cfeac3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "seen", "source": "https://t.me/CVEhub/10211", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2023-23488-PoC*\nGithub: https://github.com/r3nt0n/CVE-2023-23488-PoC", "creation_timestamp": "2026-07-30T00:01:09.515854Z"}, {"uuid": "169bc322-e2e4-4475-a239-906fc934561c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "seen", "source": "https://t.me/cissp/6663", "content": "exploit\n1. CVE-2020-2546, CVE-2020-2915,\nCVE-2020-2801, CVE-2020-2798,\nCVE-2020-2883, CVE-2020-2884,\nCVE-2020-2950:\nWebLogic T3 payload exploit PoC python3\nhttps://github.com/hktalent/CVE_2020_2546\n\n2. Tips, Tricks, and Scripts for Linux Post Exploitation\nhttps://github.com/regorsec/Linux-Post-Exploitation\n\n3. CVE-2023-23488:\nUnauthenticated SQL Injection - Paid Memberships Pro < 2.9.8 (WordPress Plugin)\nhttps://github.com/r3nt0n/CVE-2023-23488-PoC\n\n4\ud83e\udd78. CVE-2023-23397:\nMicrosoft Outlook EoP Vulnerability\nhttps://www.mdsec.co.uk/2023/03/exploiting-cve-2023-23397-microsoft-outlook-elevation-of-privilege-vulnerability\n]-> 0-day: https://github.com/sqrtZeroKnowledge/CVE-2023-23397_EXPLOIT_0DAY\n\n5. Producing a PoC for CVE-2022-42475 (Fortinet RCE)\nhttps://blog.scrt.ch/2023/03/14/producing-a-poc-for-cve-2022-42475-fortinet-rce\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.12.25", "creation_timestamp": "2026-09-01T17:00:21.622175Z"}, {"uuid": "3264eb07-24e3-4b9b-806e-3fc258e1e689", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "seen", "source": "https://t.me/hacking_Attack/85447", "content": "Black Hat Ethical Hacking\nPoC exploits released for critical bugs in popular WordPress plugins\n\nPoC exploits released for critical bugs in popular WordPress pluginsPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes Three popular WordPress plugins with tens of thousands of active installations are vulnerable to high-severity or critical SQL injection vulnerabilities, with proof-of-concept exploits now publicly available.SQL injection is a website security flaw that allows attackers to input data into form fields or via URLs that modify legitimate database queries to return different data or modify a database.\n\nDepending on the website code being vulnerable to a SQL injection flaw, an attacker could modify or delete data to a site, inject malicious scripts, or gain full access to the website.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses Proof of Concept exploits released The three vulnerable plugins were discovered by Tenable\u00a0security researcher Joshua Martinelle, who reported them responsibly to WordPress on December 19, 2022, along with proofs of concept (PoCs).\n\nThe authors of the plugins released security updates to address the issues in the following days or weeks, so all problems have been fixed now, and those running the latest available version are no longer vulnerable.\n\nYesterday, the researcher disclosed technical details about each vulnerability with proof of concept exploits using the SLEEP function to demonstrate how the flaws work.\n\nThe first plugin that was found to be vulnerable to SQL injection is \u2018Paid Memberships Pro,\u2019 a membership and subscriptions management tool used in over 100,000 websites.\n\n\u201cThe plugin does not escape the \u2018code\u2019 parameter in the /pmpro/v1/order REST route before using it in a SQL statement, leading to an unauthenticated SQL injection vulnerability,\u201d reveals Tenable\u2019s post.\n\nThe flaw is tracked as CVE-2023-23488, receiving a CVSSv3 severity rating of 9.8 (critical), and it affects all versions of the plugin older than 2.9.8. Paid Memberships Pro fixed the vulnerability on December 27, 2022, with the release of version 2.9.8.\nhttps://www.bleepstatic.com/images/news/u/1220909/2023/WordPress/1/curl.png \n<figcaptionProvided example of a test attack leveraging CVE-2023-23488 (Tenable) \nThe second WordPress add-on vulnerable to SQL injection is \u2018Easy Digital Downloads,\u2019 an e-commerce solution for selling digital files with over 50,000 active installations.\n\n\u201cThe plugin does not escape the \u2018s\u2019 parameter in the \u2018edd_download_search\u2019 action before using it in a SQL statement, leading to an unauthenticated SQL injection vulnerability,\u201d explains Tenable.\n\n\u201cThe vulnerable part of the code corresponds to the \u2018edd_ajax_download_search()\u2019 function of the \u2018./includes/ajax-functions.php\u2019 file.\u201d\n\nThe vulnerability is tracked as CVE-2023-23489 and has received a CVSSv3 severity rating of 9.8, categorizing it as critical. The flaw impacts all versions below 3.1.0.4, released on January 5, 2023.\n\nFinally, Tenable discovered CVE-2023-23490, a \u2018high-severity\u2019 SQL injection flaw in \u2018Survey Marker,\u2019 a WordPress plugin used by 3,000 websites for surveys and market research.\nTrending: Common and Uncommon types of SQL Injection Trending: Offensive Security Tool: Freeze\nThe flaw received a severity rating of 8.8, according to the CVSS v3, because the attacker has to be authenticated as at least a subscriber to exploit it.\n\nHowever, this prerequisite is usually easy to fulfill, as many websites allow visitors to register as members.\n\nSurvey Marker was the quickest vendor to respond to Tenable\u2019s SQL injection[...]", "creation_timestamp": "2026-09-01T20:01:06.714290Z"}, {"uuid": "af3707c7-74a5-4aeb-a5bf-c2491ed0a0a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "seen", "source": "https://t.me/hacking_Attack/85447", "content": "Black Hat Ethical Hacking\nPoC exploits released for critical bugs in popular WordPress plugins\n\nPoC exploits released for critical bugs in popular WordPress pluginsPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes Three popular WordPress plugins with tens of thousands of active installations are vulnerable to high-severity or critical SQL injection vulnerabilities, with proof-of-concept exploits now publicly available.SQL injection is a website security flaw that allows attackers to input data into form fields or via URLs that modify legitimate database queries to return different data or modify a database.\n\nDepending on the website code being vulnerable to a SQL injection flaw, an attacker could modify or delete data to a site, inject malicious scripts, or gain full access to the website.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses Proof of Concept exploits released The three vulnerable plugins were discovered by Tenable\u00a0security researcher Joshua Martinelle, who reported them responsibly to WordPress on December 19, 2022, along with proofs of concept (PoCs).\n\nThe authors of the plugins released security updates to address the issues in the following days or weeks, so all problems have been fixed now, and those running the latest available version are no longer vulnerable.\n\nYesterday, the researcher disclosed technical details about each vulnerability with proof of concept exploits using the SLEEP function to demonstrate how the flaws work.\n\nThe first plugin that was found to be vulnerable to SQL injection is \u2018Paid Memberships Pro,\u2019 a membership and subscriptions management tool used in over 100,000 websites.\n\n\u201cThe plugin does not escape the \u2018code\u2019 parameter in the /pmpro/v1/order REST route before using it in a SQL statement, leading to an unauthenticated SQL injection vulnerability,\u201d reveals Tenable\u2019s post.\n\nThe flaw is tracked as CVE-2023-23488, receiving a CVSSv3 severity rating of 9.8 (critical), and it affects all versions of the plugin older than 2.9.8. Paid Memberships Pro fixed the vulnerability on December 27, 2022, with the release of version 2.9.8.\nhttps://www.bleepstatic.com/images/news/u/1220909/2023/WordPress/1/curl.png \n<figcaptionProvided example of a test attack leveraging CVE-2023-23488 (Tenable) \nThe second WordPress add-on vulnerable to SQL injection is \u2018Easy Digital Downloads,\u2019 an e-commerce solution for selling digital files with over 50,000 active installations.\n\n\u201cThe plugin does not escape the \u2018s\u2019 parameter in the \u2018edd_download_search\u2019 action before using it in a SQL statement, leading to an unauthenticated SQL injection vulnerability,\u201d explains Tenable.\n\n\u201cThe vulnerable part of the code corresponds to the \u2018edd_ajax_download_search()\u2019 function of the \u2018./includes/ajax-functions.php\u2019 file.\u201d\n\nThe vulnerability is tracked as CVE-2023-23489 and has received a CVSSv3 severity rating of 9.8, categorizing it as critical. The flaw impacts all versions below 3.1.0.4, released on January 5, 2023.\n\nFinally, Tenable discovered CVE-2023-23490, a \u2018high-severity\u2019 SQL injection flaw in \u2018Survey Marker,\u2019 a WordPress plugin used by 3,000 websites for surveys and market research.\nTrending: Common and Uncommon types of SQL Injection Trending: Offensive Security Tool: Freeze\nThe flaw received a severity rating of 8.8, according to the CVSS v3, because the attacker has to be authenticated as at least a subscriber to exploit it.\n\nHowever, this prerequisite is usually easy to fulfill, as many websites allow visitors to register as members.\n\nSurvey Marker was the quickest vendor to respond to Tenable\u2019s SQL injection[...]", "creation_timestamp": "2026-09-02T01:01:27.508521Z"}, {"uuid": "b6048c75-5f4a-4cd7-9ffd-fda7bba2e82c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "seen", "source": "https://t.me/cissp/6663", "content": "exploit\n1. CVE-2020-2546, CVE-2020-2915,\nCVE-2020-2801, CVE-2020-2798,\nCVE-2020-2883, CVE-2020-2884,\nCVE-2020-2950:\nWebLogic T3 payload exploit PoC python3\nhttps://github.com/hktalent/CVE_2020_2546\n\n2. Tips, Tricks, and Scripts for Linux Post Exploitation\nhttps://github.com/regorsec/Linux-Post-Exploitation\n\n3. CVE-2023-23488:\nUnauthenticated SQL Injection - Paid Memberships Pro < 2.9.8 (WordPress Plugin)\nhttps://github.com/r3nt0n/CVE-2023-23488-PoC\n\n4\ud83e\udd78. CVE-2023-23397:\nMicrosoft Outlook EoP Vulnerability\nhttps://www.mdsec.co.uk/2023/03/exploiting-cve-2023-23397-microsoft-outlook-elevation-of-privilege-vulnerability\n]-> 0-day: https://github.com/sqrtZeroKnowledge/CVE-2023-23397_EXPLOIT_0DAY\n\n5. Producing a PoC for CVE-2022-42475 (Fortinet RCE)\nhttps://blog.scrt.ch/2023/03/14/producing-a-poc-for-cve-2022-42475-fortinet-rce\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.12.25", "creation_timestamp": "2026-09-02T01:04:02.315272Z"}, {"uuid": "a251b080-ebc1-4a21-b370-f9c1bcb6faa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/85447", "content": "Black Hat Ethical Hacking\nPoC exploits released for critical bugs in popular WordPress plugins\n\nPoC exploits released for critical bugs in popular WordPress pluginsPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes Three popular WordPress plugins with tens of thousands of active installations are vulnerable to high-severity or critical SQL injection vulnerabilities, with proof-of-concept exploits now publicly available.SQL injection is a website security flaw that allows attackers to input data into form fields or via URLs that modify legitimate database queries to return different data or modify a database.\n\nDepending on the website code being vulnerable to a SQL injection flaw, an attacker could modify or delete data to a site, inject malicious scripts, or gain full access to the website.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses Proof of Concept exploits released The three vulnerable plugins were discovered by Tenable\u00a0security researcher Joshua Martinelle, who reported them responsibly to WordPress on December 19, 2022, along with proofs of concept (PoCs).\n\nThe authors of the plugins released security updates to address the issues in the following days or weeks, so all problems have been fixed now, and those running the latest available version are no longer vulnerable.\n\nYesterday, the researcher disclosed technical details about each vulnerability with proof of concept exploits using the SLEEP function to demonstrate how the flaws work.\n\nThe first plugin that was found to be vulnerable to SQL injection is \u2018Paid Memberships Pro,\u2019 a membership and subscriptions management tool used in over 100,000 websites.\n\n\u201cThe plugin does not escape the \u2018code\u2019 parameter in the /pmpro/v1/order REST route before using it in a SQL statement, leading to an unauthenticated SQL injection vulnerability,\u201d reveals Tenable\u2019s post.\n\nThe flaw is tracked as CVE-2023-23488, receiving a CVSSv3 severity rating of 9.8 (critical), and it affects all versions of the plugin older than 2.9.8. Paid Memberships Pro fixed the vulnerability on December 27, 2022, with the release of version 2.9.8.\nhttps://www.bleepstatic.com/images/news/u/1220909/2023/WordPress/1/curl.png \n<figcaptionProvided example of a test attack leveraging CVE-2023-23488 (Tenable) \nThe second WordPress add-on vulnerable to SQL injection is \u2018Easy Digital Downloads,\u2019 an e-commerce solution for selling digital files with over 50,000 active installations.\n\n\u201cThe plugin does not escape the \u2018s\u2019 parameter in the \u2018edd_download_search\u2019 action before using it in a SQL statement, leading to an unauthenticated SQL injection vulnerability,\u201d explains Tenable.\n\n\u201cThe vulnerable part of the code corresponds to the \u2018edd_ajax_download_search()\u2019 function of the \u2018./includes/ajax-functions.php\u2019 file.\u201d\n\nThe vulnerability is tracked as CVE-2023-23489 and has received a CVSSv3 severity rating of 9.8, categorizing it as critical. The flaw impacts all versions below 3.1.0.4, released on January 5, 2023.\n\nFinally, Tenable discovered CVE-2023-23490, a \u2018high-severity\u2019 SQL injection flaw in \u2018Survey Marker,\u2019 a WordPress plugin used by 3,000 websites for surveys and market research.\nTrending: Common and Uncommon types of SQL Injection Trending: Offensive Security Tool: Freeze\nThe flaw received a severity rating of 8.8, according to the CVSS v3, because the attacker has to be authenticated as at least a subscriber to exploit it.\n\nHowever, this prerequisite is usually easy to fulfill, as many websites allow visitors to register as members.\n\nSurvey Marker was the quickest vendor to respond to Tenable\u2019s SQL injection[...]", "creation_timestamp": "2026-09-05T00:00:10.945967Z"}, {"uuid": "564e814e-5618-427e-b4a0-33de549adf85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wp_paid_membership_pro_code_sqli.rb", "content": "{\"actions\": [{\"description\": \"Queries username, password hash for USER_COUNT users\", \"name\": \"List Users\"}], \"aliases\": [], \"arch\": \"\", \"author\": [\"h00die\", \"Joshua Martinelle\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Paid Membership Pro, a WordPress plugin,\\n          prior to 2.9.8 is affected by an unauthenticated SQL injection via the\\n          `code` parameter.\\n\\n          Remote attackers can exploit this vulnerability to dump usernames and password hashes\\n          from the `wp_users` table of the affected WordPress installation. These password hashes\\n          can then be cracked offline using tools such as Hashcat to obtain valid login\\n          credentials for the affected WordPress installation.\", \"disclosure_date\": \"2023-01-12\", \"fullname\": \"auxiliary/scanner/http/wp_paid_membership_pro_code_sqli\", \"is_install_path\": true, \"mod_time\": \"2023-04-12 13:09:34 +0000\", \"name\": \"Wordpress Paid Membership Pro code Unauthenticated SQLi\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/scanner/http/wp_paid_membership_pro_code_sqli.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/wp_paid_membership_pro_code_sqli\", \"references\": [\"CVE-2023-23488\", \"URL-https://www.tenable.com/security/research/tra-2023-2\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:58.084225Z"}, {"uuid": "1b2d8c2a-6c09-4a95-bbfb-3f9c0340e568", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6663", "content": "exploit\n1. CVE-2020-2546, CVE-2020-2915,\nCVE-2020-2801, CVE-2020-2798,\nCVE-2020-2883, CVE-2020-2884,\nCVE-2020-2950:\nWebLogic T3 payload exploit PoC python3\nhttps://github.com/hktalent/CVE_2020_2546\n\n2. Tips, Tricks, and Scripts for Linux Post Exploitation\nhttps://github.com/regorsec/Linux-Post-Exploitation\n\n3. CVE-2023-23488:\nUnauthenticated SQL Injection - Paid Memberships Pro < 2.9.8 (WordPress Plugin)\nhttps://github.com/r3nt0n/CVE-2023-23488-PoC\n\n4\ud83e\udd78. CVE-2023-23397:\nMicrosoft Outlook EoP Vulnerability\nhttps://www.mdsec.co.uk/2023/03/exploiting-cve-2023-23397-microsoft-outlook-elevation-of-privilege-vulnerability\n]-> 0-day: https://github.com/sqrtZeroKnowledge/CVE-2023-23397_EXPLOIT_0DAY\n\n5. Producing a PoC for CVE-2022-42475 (Fortinet RCE)\nhttps://blog.scrt.ch/2023/03/14/producing-a-poc-for-cve-2022-42475-fortinet-rce\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.12.25", "creation_timestamp": "2026-09-10T02:00:04.836689Z"}, {"uuid": "10ef1499-9a8f-45d6-91d2-9e82e7cfb20b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-23488", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6663", "content": "exploit\n1. CVE-2020-2546, CVE-2020-2915,\nCVE-2020-2801, CVE-2020-2798,\nCVE-2020-2883, CVE-2020-2884,\nCVE-2020-2950:\nWebLogic T3 payload exploit PoC python3\nhttps://github.com/hktalent/CVE_2020_2546\n\n2. Tips, Tricks, and Scripts for Linux Post Exploitation\nhttps://github.com/regorsec/Linux-Post-Exploitation\n\n3. CVE-2023-23488:\nUnauthenticated SQL Injection - Paid Memberships Pro < 2.9.8 (WordPress Plugin)\nhttps://github.com/r3nt0n/CVE-2023-23488-PoC\n\n4\ud83e\udd78. CVE-2023-23397:\nMicrosoft Outlook EoP Vulnerability\nhttps://www.mdsec.co.uk/2023/03/exploiting-cve-2023-23397-microsoft-outlook-elevation-of-privilege-vulnerability\n]-> 0-day: https://github.com/sqrtZeroKnowledge/CVE-2023-23397_EXPLOIT_0DAY\n\n5. Producing a PoC for CVE-2022-42475 (Fortinet RCE)\nhttps://blog.scrt.ch/2023/03/14/producing-a-poc-for-cve-2022-42475-fortinet-rce\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.12.25", "creation_timestamp": "2026-09-11T00:00:55.542757Z"}]}