CVE-2024-48020

Summary

CVE-2024-48020 is a new SQL Injection vulnerability affecting the Revmakx Backup and Staging plugin by WP Time Capsule. The issue arises from the plugin's failure to properly neutralize special elements used in SQL commands. An attacker can exploit this vulnerability to inject malicious SQL code, potentially gaining unauthorized access to sensitive data or even taking control of the entire system. This vulnerability affects all versions of the plugin from n/a through 1.22.21. Users are strongly advised to upgrade to the latest, secure version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.