CVE-2024-1068

Name of the Vulnerable Software and Affected Versions The 404 Solution WordPress plugin versions prior to 2.35.8

Description The issue is related to a SQL injection problem. It occurs because a parameter is not properly sanitised and escaped before being used in a SQL statement. This can be exploited by high privilege users, such as admins.

Recommendations For versions prior to 2.35.8, update to version 2.35.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the plugin's functionality to minimize the risk of exploitation by high privilege users.