CVE-2023-40609: WordPress Contact form 7 Custom validation plugin <= 1.1.3 - Unauth. SQL Injection (SQLi) vulnerability
A vulnerability in aiyaz Khorajia Contact form 7 Custom validation cf7-field-validation.This issue affects Contact form 7 Custom validation: from n/a through <= 1.1.3.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-40609?
CVE-2023-40609 is a SQL Injection vulnerability found in the WordPress Contact form 7 Custom validation Plugin version 1.1.3 and earlier.
How severe is CVE-2023-40609?
CVE-2023-40609 is considered a critical vulnerability with a severity score of 9.8.
Which software versions are affected by CVE-2023-40609?
Contact form 7 Custom validation versions from n/a through 1.1.3 are affected.
How can I fix CVE-2023-40609?
To fix CVE-2023-40609, update the Contact form 7 Custom validation Plugin to a version newer than 1.1.3.
Where can I find more information about CVE-2023-40609?
You can find more information about CVE-2023-40609 at the following link: [https://patchstack.com/database/vulnerability/cf7-field-validation/wordpress-contact-form-7-custom-validation-plugin-1-1-3-unauth-sql-injection-vulnerability?_s_id=cve](https://patchstack.com/database/vulnerability/cf7-field-validation/wordpress-contact-form-7-custom-validation-plugin-1-1-3-unauth-sql-injection-vulnerability?_s_id=cve)