CVE-2023-1016

CVE-2023-1016 is a SQL Injection vulnerability affecting the Intuitive Custom Post Order plugin for WordPress, versions up to and including 3.1.3. This flaw allows authenticated administrators to inject malicious SQL queries due to insufficient input sanitization, potentially leading to the extraction of sensitive database information. Rated 7.2 HIGH on the CVSS scale, it requires administrator privileges and a specific database configuration (like GBK) to bypass default protections, making it moderately complex to exploit. There is currently no known active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.