CVE-2023-6981

Summary

CVE-2023-6981 is a vulnerability affecting the WP SMS plugin for WordPress and WooCommerce. Authenticated attackers with contributor-level access or higher can exploit this issue by injecting SQL queries through the 'group_id' parameter, which is insufficiently escaped and prepared. This enables the attacker to extract sensitive data from the database and potentially execute reflected cross-site scripting attacks. The vulnerability exists in all versions up to and including 6.5.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.