Unrated

WordPress Paid Memberships Pro plugin <= 3.0.5 - Authenticated SQL Injection vulnerability

CVE-2024-37486 First seen on SecPulse Jul 9, 2024

Original description The description as published by the source.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Paid Memberships Pro.This issue affects Paid Memberships Pro: from n/a through 3.0.5.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
advisory patchstack.com
web wordpress.org

Key facts

Severity: Unrated
Published: Jul 9, 2024
First seen on SecPulse: Jul 9, 2024
CWE: CWE-89

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:04