WordPress security by component

Intuitive Custom Post Order

Plugin description

Intuitive Custom Post Order is a WordPress component with 3 published CVE records in this archive. The latest tracked vulnerability was published Jun 09, 2023; the highest CVE/CNA score is 6.6.

Plugin slug: intuitive-custom-post-order

Latest vulnerability

CVE-2023-1016: Intuitive Custom Post Order: SQL injection

Intuitive Custom Post Order is affected by SQL injection. Exploitation requires an authenticated WordPress account. A successful request can alter database queries and expose or modify WordPress data.

PublishedJun 09, 2023

Safe version guidanceSee mitigation notes

		Safe version
Jun 09, 2023	CVE-2023-1016 Intuitive Custom Post Order: SQL injection Intuitive Custom Post Order is affected by SQL injection. Exploitation requires an authenticated WordPress account. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE6.6 NVD7.2
Feb 21, 2023	CVE-2022-4386 Intuitive Custom Post Order: Cross-site request forgery Intuitive Custom Post Order is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.	See mitigation notes	CVE4.3 NVD4.3
Feb 21, 2023	CVE-2022-4385 Intuitive Custom Post Order: A security weakness Intuitive Custom Post Order is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE4.3 NVD4.3