{"action":"Upgrade mainwp/mainwp to 4.4.3.4 or later.","affected":[{"fixed":"4.4.3.4","introduced":"0"}],"component":"mainwp/mainwp","cve_ids":["CVE-2023-38519"],"ecosystem":"Packagist","epss":0.00551,"exploited":false,"fixed_versions":["4.4.3.4"],"ghsa_id":"GHSA-87fg-9x5w-j3rm","id":"tcs_01M5KEYSBQYCAFX4SFMJN4P331","modified_at":"2024-02-16T08:17:07.129968Z","published_at":"2023-12-20T15:30:19Z","references":["https://osv.dev/vulnerability/GHSA-87fg-9x5w-j3rm","https://nvd.nist.gov/vuln/detail/CVE-2023-38519","https://github.com/mainwp/mainwp/commit/8df951c0e8b2c2646cc57fc66b00767551cac400","https://github.com/mainwp/mainwp","https://patchstack.com/database/vulnerability/mainwp/wordpress-mainwp-plugin-4-4-3-3-sql-injection-vulnerability?_s_id=cve"],"severity":{"label":"high","score":7.6},"sources":[{"source":"osv","source_id":"GHSA-87fg-9x5w-j3rm","url":"https://osv.dev/vulnerability/GHSA-87fg-9x5w-j3rm"}],"summary":"MainWP Dashboard SQL Command Injection vulnerability"}