critical·Product Based Web Vulnerabilities·Updated Mar 10, 2026

WP Sessions Time Monitoring Full Automatic <= 1.0.8 - SQL Injection

Est. Time~10 seconds

Scan TypeGroup Scan

Targetsdomain, subdomain, ipv4

CostFree

Times Used

continuous scan runs

Continuously Checked

assets under CS

Vulnerabilities Found

confirmed findings

References

github.com↗

CVECVE-2023-5203

7.5

CVSShigh

Exploitable remotely over the internet · no authentication required.

Description

The WP Sessions Time Monitoring Full Automatic WordPress plugin before 1.0.9 does not sanitize the request URL or query parameters before using them in an SQL query, allowing unauthenticated attackers to extract sensitive data from the database via blind time based SQL injection techniques, or in some cases an error/union based technique.

Attack Vector

Network

Privileges Req.

None

User Interaction

None

Affected

WP Sessions Time Monitoring Full Automatic

AFFECTED< 1.0.9→SAFE ✓≥ 1.0.9

Updated Nov 10, 2026View on NVD →

Similar Tools

Check your infrastructure.
Right now.

12,000+ scanners. Free to start. No credit card required.

WP Sessions Time Monitoring Full Automatic <= 1.0.8 - SQL Injection

Check your infrastructure.Right now.

Check your infrastructure.
Right now.