CVE-2024-54280

Summary

CVE-2024-54280 is a newly disclosed SQL Injection vulnerability affecting Iqonic Design's WPBookit plugin. The issue arises from improper handling of special elements in SQL commands, granting attackers the ability to inject malicious code into a database. This vulnerability impacts WPBookit versions from n/a through 1.6.0, posing a significant risk to websites using this plugin. Successful exploitation could lead to unauthorized access, data theft, or system compromise. It is crucial for affected organizations to update their WPBookit plugin as soon as a patch becomes available to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.