CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in I Thirteen Web Solution WP Responsive Tabs horizontal vertical and accordion Tabs.This issue affects WP Responsive Tabs horizontal vertical and accordion Tabs: from n/a through 1.1.17.
Explanation of Vulnerability in Simple Terms
A SQL injection vulnerability in WP Responsive Tabs allows authenticated users with low privileges to read sensitive data from the site's database. The vulnerability requires network access and no user interaction. An attacker can extract database contents including user credentials and configuration data. Update to a version newer than 1.1.17.
What an attacker can do
Read sensitive data from the site database, including user information and configuration details.
Potential impact on your site
User data and site configuration may be exposed to authenticated attackers; site availability may be degraded.
Conditions required to exploit
Attacker must be logged in with low-level user privileges (e.g., subscriber or contributor role).
Key dates
External resources
Related vulnerabilities
