First published: Tue Oct 31 2023(Updated: )
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GamiPress gamipress allows SQL Injection.This issue affects GamiPress: from n/a through 2.5.7.
Credit: audit@patchstack.com
Affected Software | Affected Version | How to fix |
---|---|---|
GamiPress | <=2.5.7 |
Update to 2.5.7.1 or a higher version.
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-24000 is a vulnerability in the WordPress GamiPress Plugin <= 2.5.7 that allows SQL Injection.
The severity of CVE-2023-24000 is critical with a score of 9.8.
CVE-2023-24000 affects GamiPress versions from n/a through 2.5.7 by allowing SQL Injection.
To fix the CVE-2023-24000 vulnerability, you should update GamiPress to a version higher than 2.5.7.
You can find more information about CVE-2023-24000 at the following URL: [https://patchstack.com/database/vulnerability/gamipress/wordpress-gamipress-plugin-2-5-7-unauthenticated-sql-injection-vulnerability](https://patchstack.com/database/vulnerability/gamipress/wordpress-gamipress-plugin-2-5-7-unauthenticated-sql-injection-vulnerability?_s_id=cve)