First published: Fri Nov 03 2023(Updated: )
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Groundhogg Inc. Groundhogg allows SQL Injection.This issue affects Groundhogg: from n/a through 2.7.11.
Credit: audit@patchstack.com
Affected Software | Affected Version | How to fix |
---|---|---|
barnraiser AROUNDMe | <=2.7.11 |
Update to 2.7.11.1 or a higher version.
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-34179 is an SQL Injection vulnerability in the WordPress Groundhogg Plugin version 2.7.11 and below.
CVE-2023-34179 has a severity rating of 7.2 (high).
CVE-2023-34179 allows for SQL Injection attacks on Groundhogg version 2.7.11 and below.
To fix CVE-2023-34179, update Groundhogg Plugin to a version above 2.7.11.
You can find more information about CVE-2023-34179 at the following link: [https://patchstack.com/database/vulnerability/groundhogg/wordpress-groundhogg-plugin-2-7-10-3-sql-injection-vulnerability?_s_id=cve](https://patchstack.com/database/vulnerability/groundhogg/wordpress-groundhogg-plugin-2-7-10-3-sql-injection-vulnerability?_s_id=cve)