CVE-2023-2636

Name of the Vulnerable Software and Affected Versions AN GradeBook WordPress plugin versions 5.0.1 and earlier

Description The issue arises from the plugin's failure to properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection. This can be exploited by users with a role as low as subscriber.

Recommendations For AN GradeBook WordPress plugin versions 5.0.1 and earlier, update to a version that properly sanitises and escapes parameters used in SQL statements to prevent SQL injection. As a temporary workaround, consider restricting the role of subscribers to prevent exploitation until a patch is available.