← Back

Wc Fields Factory

wc_fields_factory

Vendor: Wc Fields Factory Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-0277
1Wc Fields Factory Project
1Wc Fields Factory
Jun 17, 2026
Apr 17, 2023
N/A· v4
7.2 HIGH· v3
N/A· v2
The WC Fields Factory WordPress plugin through 4.1.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin