CVE-2024-1711

The Create by Mediavine plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.9.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2024-1711

The Create by Mediavine plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.9.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2024-1711

The CVE-2024-1711 vulnerability affects the Create by Mediavine WordPress plugin (versions up to and including 1.9.4). It enables unauthenticated SQL Injection via the id parameter due to insufficient escaping and lack of proper query preparation, allowing an attacker to inject additional SQL and...

CVE-2024-1711 Create by Mediavine <= 1.9.4 - Unauthenticated SQL Injection via 'id'

The Create by Mediavine plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.9.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

WordPress Create by Mediavine Plugin <= 1.9.4 is vulnerable to SQL Injection

Software Create by Mediavine Type Plugin Vulnerable versions = 1.9.4 Fixed in 1.9.5 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-1711 Patch priority High CVSS severity High 9.3 Developer Mediavine PSID 4a3e5c000c5f Credits Krzysztof Zając Required privilege Unauthenticated...