CVE-2024-11179

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Nov 20, 2024
Updated: Nov 22, 2024
CWE ID 89

Summary

CVE-2024-11179 is a vulnerability affecting the MStore API plugin for WordPress. The issue lies in the insufficient escaping of user-supplied data in the 'status_type' parameter, which can be exploited by authenticated attackers. This flaw allows attackers to inject additional SQL queries into existing ones, potentially extracting sensitive information from the database. The vulnerability is present in all versions up to and including 4.15.7.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share