CVE-2023-40207: WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to SQL Injection
Published Nov 6, 2023
·Updated
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RedNao Donations Made Easy – Smart Donations allows SQL Injection.This issue affects Donations Made Easy – Smart Donations: from n/a through 4.0.12.
Affected Software
1 affected component
RedNao Donations Made Easy - Smart Donations Wordpress<=4.0.12
Event History
Nov 6, 2023
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-40207.
2
What is the severity of CVE-2023-40207?
The severity of CVE-2023-40207 is critical with a CVSS score of 9.8.
3
Which software versions are affected by CVE-2023-40207?
The RedNao Donations Made Easy – Smart Donations plugin versions from n/a through 4.0.12 are affected by CVE-2023-40207.
4
What is the CWE ID for CVE-2023-40207?
The CWE ID for CVE-2023-40207 is CWE-89.
5
How can I fix the SQL Injection vulnerability in the Donations Made Easy – Smart Donations plugin?
To fix the SQL Injection vulnerability, update the Donations Made Easy – Smart Donations plugin to a version higher than 4.0.12.