CVE-2024-10009

creationtimestamp| type| source ---|---|--- 2025-05-20 16:40:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17001...

CVE-2024-10009 Website File Changes < 2.1.0 - Admin+ Authenticated SQL Injection

The Melapress File Monitor WordPress plugin before 2.1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks...

CVE-2024-10009

The Melapress File Monitor WordPress plugin, in versions prior to 2.1.0 , is vulnerable to an authenticated SQL injection attack. The root cause is the failure to properly sanitize and escape a parameter before incorporating it into a SQL statement. This flaw allows users with administrator privi...