CVE-2024-38788 WordPress UiPress lite plugin <= 3.4.06 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Bởi Admin 2020 UiPress lite allows SQL Injection.This issue affects UiPress lite: from n/a through 3.4.06...

CVE-2024-38788

CVE-2024-38788 concerns UiPress lite (WordPress) with an SQL Injection vulnerability in versions up to 3.4.06. Root cause per Patchstack: improper neutralization of input in SQL commands. Impact per sources: potential unauthorized access via SQL injection; patch released in 3.4.07. Recommendation...

WordPress UiPress lite Plugin <= 3.4.06 is vulnerable to SQL Injection

Software UiPress lite Type Plugin Vulnerable versions = 3.4.06 Fixed in 3.4.07 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-38788 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 8c36c4e4e9c9 Credits Nguyễn Trung Kiên anhchangmutrang Required privile...