CVE-2023-50857: WordPress Automation By Autonami Plugin <= 2.6.1 is vulnerable to SQL Injection

Q: What is the severity of CVE-2023-50857?

CVE-2023-50857 is a high-severity SQL injection vulnerability.

Q: How do I fix CVE-2023-50857?

To fix CVE-2023-50857, update the FunnelKit Automations plugin to version 2.6.2 or later.

Q: What is the impact of CVE-2023-50857?

CVE-2023-50857 allows attackers to execute arbitrary SQL commands, which can lead to data leakage or manipulation.

Q: Which software is affected by CVE-2023-50857?

CVE-2023-50857 affects FunnelKit Automations for WordPress up to version 2.6.1.

Q: How can I determine if my site is vulnerable to CVE-2023-50857?

Check if your version of the FunnelKit Automations plugin is 2.6.1 or earlier to determine if your site is vulnerable to CVE-2023-50857.

Published Dec 28, 2023

Updated

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FunnelKit Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit.This issue affects Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit: from n/a through 2.6.1.

Affected Software

1 affected component

FunnelKit Funnelkit Automations Wordpress<=2.6.1

Remediation

Information

Update to 2.7.0 or a higher version.

Event History

Dec 28, 2023

CVE Published

via MITRE·10:57 AM

Data Sourced

via MITRE·10:57 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·11:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-50857?

CVE-2023-50857 is a high-severity SQL injection vulnerability.

How do I fix CVE-2023-50857?