Lucene search
K

5 matches found

OSV
OSV
added 2024/09/13 6:15 a.m.1 views

CVE-2024-6723

The AI Engine WordPress plugin before 2.4.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by admin users when viewing chatbot discussions...

4.7CVSS5.8AI score0.00214EPSS
Exploits1References1
NVD
NVD
added 2024/09/13 6:15 a.m.9 views

CVE-2024-6723

The AI Engine WordPress plugin before 2.4.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by admin users when viewing chatbot discussions...

4.7CVSS0.00214EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2024/09/13 6:0 a.m.10 views

CVE-2024-6723 AI Engine < 2.4.8 - Admin+ SQLi

The AI Engine WordPress plugin before 2.4.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by admin users when viewing chatbot discussions...

7.8AI score0.00214EPSS
Exploits1References1
Cvelist
Cvelist
added 2024/09/13 6:0 a.m.15 views

CVE-2024-6723 AI Engine < 2.4.8 - Admin+ SQLi

The AI Engine WordPress plugin before 2.4.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by admin users when viewing chatbot discussions...

0.00214EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/09/12 12:0 a.m.2 views

PT-2024-37823 · WordPress · Ai Engine

Name of the Vulnerable Software and Affected Versions: The AI Engine WordPress plugin versions prior to 2.4.8 Description: The issue is related to a SQL injection that occurs due to improper sanitization and escaping of a parameter in a SQL statement. This can be exploited by admin users when...

4.7CVSS8AI score0.00214EPSS
Exploits1References6
Rows per page
Query Builder