CVE-2024-25902 — WordPress Malware Scanner Plugin <= 4.7.2 is vulnerable to SQL Injection

CVE-2024-25902

WordPress Malware Scanner Plugin <= 4.7.2 is vulnerable to SQL Injection PUBLISHED

Description (CNA)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in miniorange Malware Scanner.This issue affects Malware Scanner: from n/a through 4.7.2.

Affected (CNA)

Vendor / product	Versions
miniorange / Malware Scanner	affected n/a through 4.7.2

CWE

CWE-89

References

https://patchstack.com/database/vulnerability/miniorange-malware-protection/wordpress-malware-scanner-plugin-4-7-2-admin-sql-injection-vulnerability?_s_id=cve

ADP enrichment

CVE

No English description supplied.

https://patchstack.com/database/vulnerability/miniorange-malware-protection/wordpress-malware-scanner-plugin-4-7-2-admin-sql-injection-vulnerability?_s_id=cve

CISA-ADP

No English description supplied.

No references supplied.