CVE-2023-40207 WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to SQL Injection

2023-11-0608:00:09

CWE-89

Patchstack

www.cve.org

wordpress

donations

sql injection

10 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.0%

JSON

Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in RedNao Donations Made Easy – Smart Donations allows SQL Injection.This issue affects Donations Made Easy – Smart Donations: from n/a through 4.0.12.

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "smart-donations",
    "product": "Donations Made Easy – Smart Donations",
    "vendor": "RedNao",
    "versions": [
      {
        "lessThanOrEqual": "4.0.12",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]