CVE-2024-51606
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Nov 9, 2024
Updated: Nov 14, 2024
CWE ID 89
Summary
CVE-2024-51606 is an SQL Injection vulnerability affecting Blrt WP Embed, a plugin used for embedding content into WordPress websites. The flaw arises from the plugin's failure to properly neutralize special elements in SQL commands. An attacker can exploit this vulnerability to inject malicious SQL statements, potentially leading to unauthorized data access or modification. The issue spans from the initial release (n/a) up to version 1.6.9. Users are advised to update the plugin to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.