CVE-2023-52134: WordPress GEO my WordPress Plugin <= 4.0.2 is vulnerable to SQL Injection
Published Dec 31, 2023
·Updated
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eyal Fitoussi GEO my WordPress.This issue affects GEO my WordPress: from n/a through 4.0.2.
Affected Software
1 affected component
Geomywp Geo My Wordpress Wordpress<=4.0.2
Remediation
Information
Update to 4.0.3 or a higher version.
Event History
Dec 31, 2023
CVE Published
via MITRE·04:53 PM
Data Sourced
via MITRE·04:53 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-52134?
CVE-2023-52134 has a medium severity rating due to its potential for SQL injection attacks.
2
How do I fix CVE-2023-52134?
To fix CVE-2023-52134, update the GEO my WordPress plugin to version 4.0.3 or later.
3
What versions are affected by CVE-2023-52134?
CVE-2023-52134 affects all versions of GEO my WordPress up to and including 4.0.2.
4
What type of vulnerability is CVE-2023-52134?
CVE-2023-52134 is classified as an SQL injection vulnerability.
5
Is user data at risk due to CVE-2023-52134?
Yes, CVE-2023-52134 may expose user data to unauthorized access via SQL injection.