CVE-2023-46821

CVE-2023-46821 describes an authenticated SQL Injection vulnerability in Milan Petrovic's GD Security Headers plugin, affecting versions up to and including 1.7. This flaw allows administrative users to inject malicious SQL commands. With a CVSS score of 7.2 (High), the vulnerability presents a significant risk, enabling attackers to compromise data confidentiality, integrity, and availability with low attack complexity. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit or Nuclei, or entries in ExploitDB. Community discussion and media coverage are minimal, suggesting limited public awareness of this vulnerability.