Lucene search
+L

2 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 6:53 a.m.•19 views

CVE-2024-10499

The AI Engine WordPress plugin before 2.6.5 does not sanitize and escape a parameter from one of its RESP API endpoint before using it in a SQL statement, allowing admins to perform SQL injection attacks...

7.2CVSS7.6AI score0.00613EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/12 12:00 a.m.•6 views

CVE-2024-10499: Improper Neutralization of Special Elements used in an SQL Command

The AI Engine WordPress plugin before 2.6.5 does not sanitize and escape a parameter from one of its RESP API endpoint before using it in a SQL statement, allowing admins to perform SQL injection attacks...

7.2CVSS5.8AI score0.00613EPSS
SaveExploits1References1
Rows per page
Query Builder