CVE-2024-56042
CVSS 3.1 Score 9.3 of 10 (high)
Details
Published Dec 31, 2024
CWE ID 89
Summary
CVE-2024-56042 is an SQL injection vulnerability affecting the WPLMS software from VibeThemes. The flaw stems from improper neutralization of special elements utilized in SQL commands. Hackers can exploit this weakness to inject malicious SQL code, potentially gaining unauthorized access to sensitive data or even taking control of the underlying database. The vulnerability has been identified in WPLMS versions prior to 1.9.9.5.3. System administrators are advised to update their software promptly to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.