CVE-2023-0388

Name of the Vulnerable Software and Affected Versions The Random Text WordPress plugin versions through 0.3.0

Description The issue is related to a SQL injection that occurs because a parameter is not properly sanitized and escaped before being used in a SQL statement. This can be exploited by any authenticated users, such as subscribers.

Recommendations For The Random Text WordPress plugin versions through 0.3.0, consider updating to a version that properly sanitizes and escapes parameters used in SQL statements to prevent SQL injection. As a temporary workaround, restrict access to authenticated users to minimize the risk of exploitation.