CVE-2023-43985: Sunnytoo Stblogsearch

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

SunnyToo stblogsearch up to v1.0.0 was discovered to contain a SQL injection vulnerability via the StBlogSearchClass::prepareSearch component.

Affected products

• Sunnytoo Stblogsearch: up to and including 1.0.0

Published 2024-01-19. Last modified 2026-06-17.