CVE-2023-50838: WordPress NEX-Forms – Ultimate Form Builder Plugin <= 8.5.5 is vulnerable to SQL Injection
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Basix NEX-Forms – Ultimate Form Builder – Contact forms and much more.This issue affects NEX-Forms – Ultimate Form Builder – Contact forms and much more: from n/a through 8.5.5.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-50838?
CVE-2023-50838 is considered a high severity SQL injection vulnerability that can lead to significant security risks.
How do I fix CVE-2023-50838?
To fix CVE-2023-50838, update the Basix NEX-Forms – Ultimate Form Builder plugin to the latest version beyond 8.5.5.
What is the impact of exploiting CVE-2023-50838?
Exploiting CVE-2023-50838 can lead to unauthorized access to the database and potential data leakage.
Which versions are affected by CVE-2023-50838?
CVE-2023-50838 affects Basix NEX-Forms – Ultimate Form Builder versions from n/a up to and including 8.5.5.
How can I identify if my site is vulnerable to CVE-2023-50838?
You can identify if your site is vulnerable to CVE-2023-50838 by checking for the presence of the affected Basix NEX-Forms plugin versions.