CVE-2023-50840

Summary

CVE-2023-50840 is an SQL injection vulnerability affecting the wpdevelop plugin Booking Manager. The issue arises from improper neutralization of special elements in SQL commands. This flaw allows malicious actors to inject malicious SQL code, potentially leading to unauthorized data access or modification. Affected versions of the plugin range from its inception through 2.1.5. It is crucial for users to update to the latest patched version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.