CVE-2024-6809 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

The Simple Video Directory WordPress plugin before 1.4.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action…
Critical CVSS: 9.8

CVE-2024-6809

The Simple Video Directory WordPress plugin before 1.4.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.
Vendor
Quantumcloud
Product
Simple Video Directory
CWE
CWE-89
Yayın Tarihi
2025-05-15 20:15:56
Güncelleme
2025-06-05 14:21:45
Source Identifier
contact@wpscan.com
KEV Date Added
-

Kategoriler

Referanslar