CVE-2023-1207

Name of the Vulnerable Software and Affected Versions HTTP Headers WordPress plugin versions prior to 1.18.8

Description The issue concerns an import functionality in the HTTP Headers WordPress plugin that executes arbitrary SQL on the server, leading to an SQL Injection vulnerability. This allows for potential exploitation by executing unauthorized SQL commands.

Recommendations For versions prior to 1.18.8, update to version 1.18.8 or later to resolve the issue. As a temporary workaround, consider disabling the import functionality until a patch is available. Restrict access to the import feature to minimize the risk of exploitation.