CVE-2023-49750

CRITICAL 9.8CVE-2023-49750 · Published 19/12/2023 · updated 17/06/2026

In short

CVE-2023-49750 is a CRITICAL (CVSS 9.8) vulnerability affecting couponis (spoonthemes).
Chance of exploitation in the next 30 days (EPSS): 0.76%, higher than 55.4% of all vulnerabilities.
Fix: update to 2.2 or later.

Package	Affected versions	Patched versions
couponis spoonthemes	`< 2.2`	`2.2`

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Spoonthemes Couponis - Affiliate & Submitting Coupons WordPress Theme.This issue affects Couponis - Affiliate & Submitting Coupons WordPress Theme: from n/a before 2.2.

References

patchstack.com/database/vulnerability/couponis/wordpress-couponis-affiliate-submitting-coupons-wordpress-theme-theme-3-1-7-sql-injection-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free