PT-2024-38567 · WordPress · Adicon Server

Sumit Patel

·

CVE-2024-7766

·

Published

2024-09-11

·

Updated

2024-09-26

CVSS v3.1

7.2

High

VectorAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Adicon Server WordPress plugin versions 1.2 and earlier
Description The Adicon Server WordPress plugin does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks.
Recommendations For Adicon Server WordPress plugin versions 1.2 and earlier, update to a version that includes the necessary sanitization and escaping of parameters in SQL statements to prevent SQL injection attacks.

Exploit

Fix

SQL injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2024-7766

Affected Products

Adicon Server