Approved changes feed: RSS · Atom

cpe:2.3:a:wp_custom_cursors_project:wp_custom_cursors:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWp Custom Cursors Project (4249bb12-6712-5c4d-b11f-59dfbbe5c89d)
ProductWp Custom Cursors (a8d730b0-a62d-52ba-9b81-297aa59ae9ae)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-2221 vulnerable 2026-06-08 06:02:41.640178 WP Custom Cursors < 3.2 - Admin+ SQLi
The WP Custom Cursors WordPress plugin before 3.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as Admin.
Published: 2023-06-19T10:52:42.024Z
Updated: 2024-12-12T21:05:26.061Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.