CVE-2024-11267

creationtimestamp| type| source ---|---|--- 2025-05-20 19:42:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17055...

WordPress JSP Store Locator plugin <= 1.0 - Contributor+ SQL Injection vulnerability

Contributor+ SQL Injection vulnerability discovered by Régis SENET in WordPress Plugin JSP Store Locator versions = 1.0...

CVE-2024-11267

The JSP Store Locator WordPress plugin through 1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing user with Contributor to perform SQL injection attacks...