CVE-2023-5640

CVE-2023-5640 is a critical SQL injection vulnerability affecting the dguzun Article Analytics WordPress plugin. Unauthenticated attackers can exploit this flaw via an AJAX action due to improper sanitization of a parameter, leading to full compromise of confidentiality, integrity, and availability. With a CVSS score of 9.8, this vulnerability is easily exploitable over the network with low attack complexity. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating potential interest from threat actors.