Read the docs

Hijiriworld

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Hijiriworld records in CISA KEV

No Hijiriworld vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Advanced Schedule Posts 1 record MEDIUM Intuitive Custom Post Order 1 record LOW

Records

1 record in Intuitive Custom Post Order · all components

TI-2023-00961 CVE-2023-1016 · GHSA-qj2q-q979-fccj

Intuitive Custom Post Order <= 3.1.4.1 - Authenticated (Admin+) SQL Injection

Priority LOW 36

The Intuitive Custom Post Order plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 3.1.4.1, due to insufficient escaping on the user supplied 'objects' and 'tags' parameters and lack of…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00971 Published 2023-06-09 No fix listed CWE-89
Open these records in search →