WordPress Plugin Vulnerabilities

Survey Maker < 3.1.2 - Subscriber+ SQLi

Description

The plugin does not properly sanitise and escape the surveys_ids parameter before using it in a SQL statement via the ays_surveys_export_json AJAX action , leading to a SQL injection exploitable by any authenticated users, such as subscriber

Proof of Concept

Affects Plugins

Plugin icon
survey-maker
Fixed in 3.1.2

References

CVE
CVE-2023-23490
URL
https://www.tenable.com/security/research/tra-2023-2

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89
CVSS
7.7 (high)

Miscellaneous

Original Researcher
Joshua Martinelle (Tenable)
Verified
No
WPVDB ID
47156cc4-7e83-4d96-abb0-bc3cde709850

Timeline

Publicly Published
2023-01-12 (about 3 years ago)
Added
2023-01-20 (about 3 years ago)
Last Updated
2023-01-20 (about 3 years ago)

Other

Published
Title
Published
2025-03-26
Title
FlexStock < 3.13.2 - Authenticated (Administrator+) SQL Injection
Published
2021-02-08
Title
Pricing Table by Supsystic < 1.8.9 - Authenticated SQL Injections
Published
2024-12-02
Title
NEX-Forms – Ultimate Form Builder < 8.7.9 - Authenticated (Administrator+) SQL Injection
Published
2023-02-06
Title
GigPress <= 2.3.28 - Subscriber+ SQLi
Published
2025-05-01
Title
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager < 4.89 - Unauthenticated SQL Injection