CVE-2023-48738

CRITICAL 9.8CVE-2023-48738 · Published 19/12/2023 · updated 17/06/2026

In short

CVE-2023-48738 is a CRITICAL (CVSS 9.8) vulnerability affecting functionality (portotheme).
Chance of exploitation in the next 30 days (EPSS): 0.77%, higher than 56.0% of all vulnerabilities.
Fix: update to 2.12.1 or later.

Package	Affected versions	Patched versions
functionality portotheme	`< 2.12.1`	`2.12.1`

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Porto Theme Porto Theme - Functionality.This issue affects Porto Theme - Functionality: from n/a before 2.12.1.

References

patchstack.com/database/vulnerability/porto-functionality/wordpress-porto-theme-functionality-plugin-2-11-1-unauthenticated-sql-injection-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free