CVE-2023-1207
HTTP Headers < 1.18.8 - Admin+ SQL Injection
HIGH 7.2EPSS 0.9%
This HTTP Headers WordPress plugin before 1.18.8 has an import functionality which executes arbitrary SQL on the server, leading to an SQL Injection vulnerability.
- Affected
- HTTP Headers
- CVSS v3.1 NVD
- 7.2 HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - EPSS
- 0.89% chance of exploitation in the next 30 days, 59th percentile
- Published
- 2023-05-15
- Updated
- 2025-01-24