CVE-2023-5203 Scanner
CVE-2023-5203 Scanner - SQL Injection vulnerability in WP Sessions Time Monitoring Full Automatic Wordpress Plugin
Used 3.5k times · 3.3k assets checked · domain, subdomain, ipv4
CVE
CVE-2023-5203
7.5
CVSShigh
Exploitable remotely over the internet · no authentication required.
Description
The WP Sessions Time Monitoring Full Automatic WordPress plugin before 1.0.9 does not sanitize the request URL or query parameters before using them in an SQL query, allowing unauthenticated attackers to extract sensitive data from the database via blind time based SQL injection techniques, or in some cases an error/union based technique.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
wp sessions time monitoring full automatic
Updated Sep 28, 2026View on NVD →
S4E scanner
CVE history: wp sessions time monitoring full automatic
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →