CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in rocketelements Split Test For Elementor split-test-for-elementor allows SQL Injection.This issue affects Split Test For Elementor: from n/a through <= 1.8.3.
Explanation of Vulnerability in Simple Terms
Split Test For Elementor versions up to 1.8.3 contain a SQL injection vulnerability accessible to high-privilege users. An attacker with admin or editor access can inject malicious SQL through the plugin's input fields, potentially reading sensitive database information. The vulnerability affects the site's database confidentiality and may cause minor service disruption.
What an attacker can do
Read sensitive data from the site's database, such as user credentials or private content.
Potential impact on your site
Compromised user data and private information if an admin or editor account is breached or malicious.
Conditions required to exploit
Attacker must have admin or editor-level access to the WordPress site.
Key dates
External resources
