Lucene search
K

8 matches found

Nuclei
Nuclei
added 6 days ago62 views

WP Query Console <= 1.0 - Remote Code Execution

Improper Control of Generation of Code 'Code Injection' vulnerability in LUBUS WP Query Console allows Code Injection.This issue affects WP Query Console- from n/a through 1.0. id: CVE-2024-50498 info: name: WP Query Console = 1.0 - Remote Code Execution author: s4e-io severity: critical...

10CVSS7.5AI score0.91902EPSS
Exploits4References4
GithubExploit
GithubExploit
added 2026/01/22 8:29 p.m.134 views

Exploit for Code Injection in Lubus Wp_Query_Console

CVE-2024-50498 / 0-Click RCE Exploit - Author: Joshua Provost...

10CVSS6.4AI score0.91902EPSS
Exploits4
NVD
NVD
added 2024/10/28 12:15 p.m.27 views

CVE-2024-50498

Improper Control of Generation of Code 'Code Injection' vulnerability in Ajit Bohra WP Query Console wp-query-console allows Code Injection.This issue affects WP Query Console: from n/a through = 1.0...

10CVSS0.91902EPSS
Exploits4References2
ATTACKERKB
ATTACKERKB
added 2024/10/28 12:15 p.m.7 views

CVE-2024-50498

Improper Control of Generation of Code 'Code Injection' vulnerability in LUBUS WP Query Console allows Code Injection.This issue affects WP Query Console: from n/a through 1.0...

10CVSS5.4AI score0.91902EPSS
Exploits4References3
OSV
OSV
added 2024/10/28 12:15 p.m.3 views

CVE-2024-50498

Improper Control of Generation of Code 'Code Injection' vulnerability in LUBUS WP Query Console allows Code Injection.This issue affects WP Query Console: from n/a through 1.0...

9.8CVSS5.8AI score0.91902EPSS
Exploits4References2
Cvelist
Cvelist
added 2024/10/28 11:24 a.m.32 views

CVE-2024-50498 WordPress WP Query Console plugin <= 1.0 - Remote Code Execution (RCE) vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in Ajit Bohra WP Query Console wp-query-console allows Code Injection.This issue affects WP Query Console: from n/a through = 1.0...

10CVSS0.91902EPSS
Exploits4References1
CVE
CVE
added 2024/10/28 11:24 a.m.100 views

CVE-2024-50498

Summary of CVE-2024-50498: The WordPress plugin WP Query Console ≤ 1.0 is vulnerable to an unauthenticated Remote Code Execution due to improper control of code generation, enabling arbitrary PHP execution via a crafted REST request (example: POST to /wp-json/wqc/v1/query with {"queryArgs":"phpin...

10CVSS7.4AI score0.91902EPSS
In wildExploits4References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/28 11:24 a.m.19 views

CVE-2024-50498 WordPress WP Query Console plugin <= 1.0 - Remote Code Execution (RCE) vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in Ajit Bohra WP Query Console wp-query-console allows Code Injection.This issue affects WP Query Console: from n/a through = 1.0...

10CVSS7.4AI score0.91902EPSS
Exploits4References1
Rows per page
Query Builder