TI-2023-05191 CVE-2023-5640 · GHSA-mpqx-f5wx-h649Article Analytics <= 1.0 - Unauthenticated SQL injectionPriority MEDIUM 45The Article Analytics WordPress plugin does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection vulnerability.CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01261 · Published 2023-11-20 · No fix listed CWE-89