EUVD-2024-23204

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

SQL Injection vulnerability in miniorange Malware Scanner affects versions up to 4.7.2.

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2024-25902	28 Feb 202414:27	–	circl
CNNVD	WordPress Plugin Malware Scanner SQL Injection Vulnerability	28 Feb 202400:00	–	cnnvd
CVE	CVE-2024-25902	28 Feb 202413:01	–	cve
Cvelist	CVE-2024-25902 WordPress Malware Scanner Plugin <= 4.7.2 is vulnerable to SQL Injection	28 Feb 202413:01	–	cvelist
NVD	CVE-2024-25902	28 Feb 202413:15	–	nvd
OSV	CVE-2024-25902	28 Feb 202413:15	–	osv
Patchstack	WordPress Malware Scanner Plugin <= 4.7.2 is vulnerable to SQL Injection	12 Feb 202400:00	–	patchstack
Prion	Sql injection	28 Feb 202413:15	–	prion
Positive Technologies	PT-2024-21193 · Miniorange · Miniorange Malware Scanner	28 Feb 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-25902	5 Feb 202513:03	–	redhatcve

[
  {
    "enisaIdVendor": [
      {
        "id": "6f2786a0-33da-320e-b5a6-3ede3a6b8199",
        "vendor": {
          "name": "miniorange"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "40ba9718-e69a-3173-bdd1-c719eb763a46",
        "product": {
          "name": "Malware Scanner"
        },
        "product_version": "n/a ≤4.7.2"
      },
      {
        "id": "487d74e1-3fa6-3f7e-9444-b7b7d17cd8af",
        "product": {
          "name": "Malware Scanner"
        }
      }
    ]
  }
]

Source	Link
patchstack	www.patchstack.com/database/vulnerability/miniorange-malware-protection/wordpress-malware-scanner-plugin-4-7-2-admin-sql-injection-vulnerability

03 Oct 2025 20:07Current

8High risk

Vulners AI Score8

CVSS 3.17.2 - 7.6

EPSS0.00541

SSVC