---
id: 3966
title: "[CVE-2023-0895] WP Coder, Version 2.5.3 Advisory"
cve: CVE-2023-0895
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/wp-coder-version-2-5-3-advisory"
published_at: "2023-04-13T00:00:00Z"
tags: ["sql-injection", "wordpress", "vulnerability", "security-advisory", "wp-coder", "cve-2023-0895"]
phying_url: "https://phying.com/item/3966"
lang: en
---

# [CVE-2023-0895] WP Coder, Version 2.5.3 Advisory

## Summary

Advisory on CVE-2023-0895: the WP Coder WordPress plugin (≤2.5.3) has a time-based SQL injection via the 'id' parameter, letting authenticated admins read sensitive database contents; fixed in 2.5.4.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2023-0895
- **Published:** 2023-04-13T00:00:00Z
- **Original:** https://bishopfox.com/blog/wp-coder-version-2-5-3-advisory
- **Phying News:** https://phying.com/item/3966