CVE-2024-13750

Summary

CVE-2024-13750 is a vulnerability affecting the Multilevel Referral Affiliate Plugin for WooCommerce used with WordPress. This issue allows authenticated attackers with Subscriber-level access and above to inject SQL queries through the 'orderby' parameter with insufficient escaping and unprepared queries. By exploiting this vulnerability, attackers can extract sensitive data from the database. This issue affects all versions up to and including 2.27. It is recommended that users upgrade to the latest version of the plugin to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.