CVE-2023-5203

CVE-2023-5203 is a critical SQL injection vulnerability affecting the WP Sessions Time Monitoring Full Automatic WordPress plugin prior to version 1.0.9. This flaw allows unauthenticated attackers to extract sensitive database information through blind time-based, or in some cases error/union-based, SQL injection by manipulating unsanitized request URLs and query parameters. With a CVSS score of 7.5 (HIGH), the vulnerability is easily exploitable over the network with low attack complexity, posing a significant risk of data compromise. While no official exploit intelligence (Metasploit, Nuclei, ExploitDB) is publicly available, community discussions indicate that exploit code exists, with one post specifically mentioning Nuclei, suggesting potential active exploitation or readily available proof-of-concept code.