CVE-2023-5203
CVSS v3
7.5
HIGH
EPSS Score
2.2 %
exploit probability, as of 2026-10-04
CISA KEV
No
known exploited
Exploitation
—
SSVC status
Description
The WP Sessions Time Monitoring Full Automatic WordPress plugin before 1.0.9 does not sanitize the request URL or query parameters before using them in an SQL query, allowing unauthenticated attackers to extract sensitive data from the database via blind time based SQL injection techniques, or in some cases an error/union based technique.
Technical details
- Published
- 2023-12-26
Frequently asked questions
What is CVE-2023-5203?
The WP Sessions Time Monitoring Full Automatic WordPress plugin before 1.0.9 does not sanitize the request URL or query parameters before using them in an SQL query, allowing unauthenticated attackers to extract sensitive data from the database via blind time based SQL injection techniques, or in some cases an error/union based technique.
Is CVE-2023-5203 actively exploited?
Active exploitation of CVE-2023-5203 has not been confirmed. Its EPSS score was 2.2% on 2026-10-04, the estimated probability of exploitation in the next 30 days.
What is the CVSS score for CVE-2023-5203?
CVE-2023-5203 has a CVSS v3 base score of 7.5 (HIGH severity).
Is CVE-2023-5203 affecting your environment?
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.
No credit card required · 50 free checks/month · Free API key
Other 2023 vulnerabilities worth triaging
Ranked by exploit probability (EPSS).