← WordPress Vulnerabilities
WordPress security by component

AN_GradeBook

AN_GradeBook is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Jul 17, 2023; the highest CVE/CNA score is 8.8.

Plugin slug: an-gradebook

CVE-2023-2636: AN_GradeBook: SQL injection

AN_GradeBook is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.

PublishedJul 17, 2023
Safe version guidanceSee mitigation notes
Safe version
Jul 17, 2023 CVE-2023-2636
AN_GradeBook: SQL injection
AN_GradeBook is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE8.8
NVD8.8
Jul 10, 2023 CVE-2023-2709
AN_GradeBook: Cross-site scripting
AN_GradeBook is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE4.8
NVD4.8