CVE-2024-30497

Summary

CVE-2024-30497 is a newly identified SQL injection vulnerability that affects the WP Responsive Tabs plugin, versions 1.0 through 1.1.17. The issue stems from the plugin's failure to properly neutralize special elements in SQL commands. An attacker could exploit this vulnerability to execute arbitrary SQL queries, potentially leading to unauthorized access, data theft, or website defacement. To mitigate this risk, users are encouraged to update the WP Responsive Tabs plugin to the latest version or consider disabling the plugin until a patch is available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.