CVE-2024-30491

CVE-2024-30491 affects ProfileGrid (WordPress plugin) up to version 5.7.8. The issue is an SQL Injection flaw in ProfileGrid’s handling of input, enabling unauthenticated access to potentially exposed data (root cause: improper neutralization of input in SQL commands). Wordfence and RH advisories...

CVE-2024-30490

CVE-2024-30490 affects the WordPress ProfileGrid plugin (versions through 5.7.8). The root cause is SQL Injection from insufficient escaping of the user-supplied ‘search’ parameter, leading to arbitrary SQL execution. Public descriptions from connected sources confirm the plugin versions affected...