PT-2025-21420 · WordPress · The Connexion Logs Wordpress Plugin

Régis Senet

·

CVE-2024-11372

·

Published

2025-05-15

·

Updated

2025-05-16

CVSS v3.1

7.2

High

VectorAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: The Connexion Logs WordPress plugin versions 3.0.2 and earlier
Description: The issue allows admins to perform SQL injection attacks due to a parameter not being sanitized and escaped before use in a SQL statement.
Recommendations: For The Connexion Logs WordPress plugin versions 3.0.2 and earlier, update to a version that includes the necessary sanitization and escaping of parameters in SQL statements to prevent SQL injection attacks.

Exploit

Fix

SQL injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2024-11372

Affected Products

The Connexion Logs Wordpress Plugin