CVE-2023-51210

Summary

CVE-2023-51210 is a newly disclosed SQL injection vulnerability. Hackers can exploit this weakness in Webkul Bundle Product 6.0.1 by manipulating the id_product parameters in the UpdateProductQuantity function. Successful attacks could enable remote code execution, potentially leading to serious data breaches or system takeovers. This issue poses a significant risk for websites using this outdated software and underscores the importance of prompt patching and secure coding practices.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.