WordPress Website File Changes plugin < 2.1.1 - Authenticated SQL Injection vulnerability

Authenticated SQL Injection vulnerability discovered by y4ng0615 in WordPress Plugin Melapress File Monitor versions 2.1.1...

CVE-2024-9879

The Melapress File Monitor WordPress plugin before 2.1.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks...

CVE-2024-9879

The Melapress File Monitor WordPress plugin is vulnerable to SQL injection in versions prior to 2.1.1 . The root cause is the failure to properly sanitize and escape a parameter before using it in a SQL statement. This flaw allows authenticated admins to perform SQL injection attacks. Remediation...