CVE-2024-5975

The CZ Loan Management WordPress plugin (versions 1.1 and earlier ) is vulnerable to SQL injection because it fails to properly sanitize and escape a parameter used in an SQL statement via an AJAX action . This action is accessible to unauthenticated users , potentially allowing attackers to exec...