CVE-2023-45046: 
WordPress vulnerability analysis and mitigation

A SQL Injection vulnerability was discovered in the Pressference Exporter WordPress plugin affecting versions up to 1.0.3. The vulnerability was identified on October 3, 2023, and was assigned CVE-2023-45046. This security issue allows SQL Injection attacks when specific conditions are met (Patchstack Advisory).

The vulnerability is classified as an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') with a CVSS v3.1 Base Score of 9.8 CRITICAL (Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The issue affects Pressference Exporter plugin versions from unspecified versions through 1.0.3. Administrator privileges are required to exploit this vulnerability (NVD, Patchstack Advisory).

The vulnerability could allow a malicious actor to directly interact with the database, potentially leading to unauthorized access to sensitive information. Despite its critical CVSS score, Patchstack has assessed this as a low-priority issue that is unlikely to be exploited (Patchstack Advisory).

Currently, there is no official fix available for this vulnerability. Given the low severity impact and unlikely exploitation potential, no immediate mitigation action is deemed necessary (Patchstack Advisory).