CVE-2024-10638
CVSS 3.1 Score 4.1 of 10 (medium)
Details
Published Mar 25, 2025
Updated: Mar 27, 2025
Summary
CVE-2024-10638 is a new vulnerability affecting the Sale Badges plugin for Woocommerce in WordPress. Prior to version 1.5.11, this plugin fails to sanitize and escape a user input parameter before using it in a SQL statement. This oversight creates an opportunity for attackers to execute SQL injection attacks, putting administrative functionality at risk. Successful exploitation could result in unauthorized access to sensitive data or even complete system takeover. Users are urged to upgrade to the latest plugin version to mitigate this issue.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.