CVE-2023-50856

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in FunnelKit Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels & Maximize Profits.This issue affects Funnel Builder for WordPress by FunnelKit –...

CVE-2023-50856

CVE-2023-50856 affects Funnel Builder for WordPress by FunnelKit (funnel-builder) up to version 2.14.3. It is an SQL Injection (improper neutralization of SQL elements) vulnerability that can be exploited remotely over the network with no user interaction, requiring high privileges, and can impac...

WordPress Funnel Builder for WordPress by FunnelKit Plugin <= 2.14.3 is vulnerable to SQL Injection

Software Funnel Builder for WordPress by FunnelKit Type Plugin Vulnerable versions = 2.14.3 Fixed in 2.14.4 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-50856 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID b73a1107b7a1 Credits Muhammad Daffa Requir...