Lucene search
K

7 matches found

Packet Storm
Packet Storm
added 2025/01/14 12:0 a.m.205 views

WordPress CF Internal Link Shortcode 1.1.0 SQL Injection

WordPress CF Internal Link Shortcode plugin versions 1.1.0 and below suffer from a remote SQL injection vulnerability. CVE-2024-12404 CF Internal Link Shortcode = 1.1.0 - Unauthenticated SQL Injection Description The CF Internal Link Shortcode plugin for WordPress is vulnerable to SQL Injection v...

7.5CVSS8.7AI score0.30275EPSS
Exploits2
NVD
NVD
added 2025/01/11 3:15 a.m.8 views

CVE-2024-12404

The CF Internal Link Shortcode plugin for WordPress is vulnerable to SQL Injection via the 'posttitle' parameter in all versions up to, and including, 1.1.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

7.5CVSS0.30275EPSS
Exploits2References2
Cvelist
Cvelist
added 2025/01/11 2:20 a.m.14 views

CVE-2024-12404 CF Internal Link Shortcode <= 1.1.0 - Unauthenticated SQL Injection

The CF Internal Link Shortcode plugin for WordPress is vulnerable to SQL Injection via the 'posttitle' parameter in all versions up to, and including, 1.1.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

7.5CVSS0.30275EPSS
Exploits2References2
CVE
CVE
added 2025/01/11 2:20 a.m.28 views

CVE-2024-12404

CVE-2024-12404 : CF Internal Link Shortcode for WordPress is vulnerable to an unauthenticated SQL Injection via the post_title parameter in versions up to 1.1.0 due to insufficient escaping and poor query preparation. This could allow an attacker to append additional SQL commands to existing quer...

7.5CVSS7.7AI score0.30275EPSS
Exploits2References2
Vulnrichment
Vulnrichment
added 2025/01/11 2:20 a.m.9 views

CVE-2024-12404 CF Internal Link Shortcode <= 1.1.0 - Unauthenticated SQL Injection

The CF Internal Link Shortcode plugin for WordPress is vulnerable to SQL Injection via the 'posttitle' parameter in all versions up to, and including, 1.1.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

7.5CVSS7.5AI score0.30275EPSS
Exploits2References2
CNNVD
CNNVD
added 2025/01/11 12:0 a.m.4 views

WordPress plugin CF Internal Link Shortcode SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A SQL injection vulnerability exists in WordPress plug...

7.5CVSS7.9AI score0.30275EPSS
Exploits2References2
Patchstack
Patchstack
added 2025/01/10 7:27 p.m.5 views

WordPress CF Internal Link Shortcode plugin <= 1.1.0 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Frissi0n in WordPress Plugin CF Internal Link Shortcode versions = 1.1.0...

7.5CVSS8.1AI score0.30275EPSS
Exploits2References1Affected Software1
Rows per page
Query Builder