WordPress GEO my WordPress Plugin <= 4.0.2 is vulnerable to SQL Injection

CVE-2023-52134

Summary

An SQL Injection vulnerability has been identified in the GEO my WordPress plugin developed by Eyal Fitoussi. This security flaw allows attackers to manipulate SQL queries, potentially compromising the integrity and confidentiality of data stored in the database. Specifically, the vulnerability can be exploited by providing specially crafted input that is passed to SQL commands without adequate validation, leading to unauthorized data access or manipulation. The affected versions include those prior to 4.0.2, highlighting the urgent need for updates and security patches.

References