WordPress security by component

MSync

Plugin description

MSync is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Dec 20, 2023; the highest CVE/CNA score is 7.6.

Plugin slug: msync

Latest vulnerability

CVE-2023-49166: MSync: SQL injection

MSync is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.

PublishedDec 20, 2023

Safe version guidanceSee mitigation notes

		Safe version
Dec 20, 2023	CVE-2023-49166 MSync: SQL injection MSync is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE7.6 NVD9.1