CVE-2024-8855

creationtimestamp| type| source ---|---|--- 2025-01-07 06:16:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yrv3hio25 2025-01-07 06:36:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/358 2025-01-07 06:58:11+00:00| seen|...

CVE-2024-8855

The WordPress Auction Plugin WordPress plugin through 3.7 does not sanitize and escape a parameter before using it in a SQL statement, allowing editors and above to perform SQL injection attacks...

CVE-2024-8855

The WordPress Auction Plugin WordPress plugin through 3.7 does not sanitize and escape a parameter before using it in a SQL statement, allowing editors and above to perform SQL injection attacks...

CVE-2024-8855

CVE-2024-8855 affects the WordPress Auction Plugin (

CVE-2024-8855 WordPress Auction <= 3.7 - Editor+ SQL Injection

The WordPress Auction Plugin WordPress plugin through 3.7 does not sanitize and escape a parameter before using it in a SQL statement, allowing editors and above to perform SQL injection attacks...