CVE-2024-31233

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sizam Rehub.This issue affects Rehub: from n/a through 19.6.1...

CVE-2024-31233 WordPress Rehub theme <= 19.6.1 - Auth. SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sizam Rehub.This issue affects Rehub: from n/a through 19.6.1...

CVE-2024-31233

CVE-2024-31233 is an Unauthenticated Local File Inclusion affecting the Rehub theme for WordPress (rehub-theme) up to version 19.6.1. Public docs in connected sources corroborate the vulnerability type, affected software, and that the issue was patched (Patched). The initial entry also lists a hi...

CVE-2024-31233 WordPress Rehub theme <= 19.6.1 - Auth. SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sizam Rehub.This issue affects Rehub: from n/a through 19.6.1...

CVE-2024-31234

CVE-2024-31234 affects the REHub Framework (WordPress) with an authenticated SQL Injection vulnerability in the framework prior to version 19.6.2. The issue is due to improper neutralization of special elements used in SQL commands. Evidence in connected RH data confirms the vulnerability, its au...

CVE-2024-31234 WordPress REHub Framework plugin < 19.6.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sizam REHub Framework.This issue affects REHub Framework: from n/a before 19.6.2...

CVE-2024-31234 WordPress REHub Framework plugin < 19.6.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sizam REHub Framework.This issue affects REHub Framework: from n/a before 19.6.2...

WordPress Plugin REHub SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A SQL injection vulnerability exists in...

WordPress Plugin REHub SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A SQL injection vulnerability exists in...

PT-2024-23875 · Unknown · Sizam Rehub Framework

Name of the Vulnerable Software and Affected Versions: Sizam REHub Framework versions prior to 19.6.2 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecting...

PT-2024-23874 · Unknown · Sizam Rehub

Name of the Vulnerable Software and Affected Versions: Sizam Rehub versions through 19.6.1 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecting malicious S...

Rehub < 19.6.2 - Unauthenticated Local File Inclusion

Description The Rehub theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 19.6.1. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can ...

Rehub < 19.6.2 - Authenticated (Subscriber+) SQL Injection

Description The Rehub theme for WordPress is vulnerable to SQL Injection in versions up to, and including, 19.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with...

REHub Framework < 19.6.2 - Authenticated (Subscriber+) SQL Injection

Description The REHub Framework plugin for WordPress is vulnerable to SQL Injection in versions prior to 19.6.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with...

Rehub < 19.6.2 - Authenticated (Editor+) Local File Inclusion

Description The Rehub theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 19.6.1. This makes it possible for authenticated attackers, with editor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any...

WordPress REHub Framework plugin < 19.6.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin REHub Framework versions 19.6.2...

WordPress Rehub theme <= 19.6.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Rafie Muhammad Patchstack in WordPress Theme Rehub versions = 19.6.1...

WordPress Rehub theme <= 19.6.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Rafie Muhammad Patchstack in WordPress Theme Rehub versions = 19.6.1...

WordPress Rehub theme <= 19.6.1 - Unauthenticated Local File Inclusion vulnerability

Unauthenticated Local File Inclusion vulnerability discovered by Rafie Muhammad Patchstack in WordPress Theme Rehub versions = 19.6.1...

WordPress REHub Framework Plugin < 19.6.2 is vulnerable to SQL Injection

Software REHub Framework Type Plugin Vulnerable versions 19.6.2 Fixed in 19.6.2 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-31234 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID 2625ebbfb885 Credits Rafie Muhammad Patchstack Required privilege...