CVE-2024-55990

Summary

CVE-2024-55990 is a newly disclosed SQL Injection vulnerability affecting Mollie for Contact Form 7, a plugin used with WordPress websites. The flaw, specifically an Improper Neutralization of Special Elements in SQL Command, enables blind SQL injection. Unauthorized users could potentially exploit this vulnerability to extract sensitive data or execute malicious SQL commands, affecting versions of Mollie for Contact Form 7 from n/a through 5.0.0.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.