CVE-2023-50845: WordPress GeoDirectory Plugin <= 2.3.28 is vulnerable to SQL Injection

Q: What is the severity of CVE-2023-50845?

CVE-2023-50845 has a medium severity level due to its potential for SQL injection.

Q: How do I fix CVE-2023-50845?

To fix CVE-2023-50845, update the AyeCode GeoDirectory plugin to version 2.3.29 or later.

Q: What systems are affected by CVE-2023-50845?

CVE-2023-50845 affects AyeCode GeoDirectory plugin versions up to 2.3.28 installed on WordPress.

Q: What type of vulnerability is CVE-2023-50845?

CVE-2023-50845 is an SQL injection vulnerability that allows attackers to execute arbitrary SQL commands.

Q: Who is responsible for addressing CVE-2023-50845?

The vendor, AyeCode, is responsible for providing patches and updates to address CVE-2023-50845.

Published Dec 28, 2023

Updated

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AyeCode - WordPress Business Directory Plugins GeoDirectory – WordPress Business Directory Plugin, or Classified Directory.This issue affects GeoDirectory – WordPress Business Directory Plugin, or Classified Directory: from n/a through 2.3.28.

Affected Software

1 affected component

AyeCode Geodirectory Wordpress<=2.3.28

Remediation

Information

Update to 2.3.29 or a higher version.

Event History

Dec 28, 2023

CVE Published

06:23 PM

Data Sourced

06:23 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-50845?

CVE-2023-50845 has a medium severity level due to its potential for SQL injection.

How do I fix CVE-2023-50845?

To fix CVE-2023-50845, update the AyeCode GeoDirectory plugin to version 2.3.29 or later.

What systems are affected by CVE-2023-50845?