CVE-2024-6928

CVE-2024-6928 concerns unauthenticated SQL injection in the Opti Marketing WordPress plugin (≤ 2.0.9) caused by insufficient escaping on a user-supplied parameter used in a SQL statement via an AJAX action. Public reports (NVD, RH, Wordfence vulnerability entries) describe that unauthenticated at...