Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.

Products

Cost Calculator Builder WordPress plugin

before 3.2.29

Source

contact@wpscan.com

CVE-2024-8379 details

Published : Sept. 30, 2024, 6:15 a.m.
Last Modified : Sept. 30, 2024, 12:45 p.m.

Description

The Cost Calculator Builder WordPress plugin before 3.2.29 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as Admin.

CVSS Score

1	2	3	4	5	6	7	8	9	10

Weakness

Weakness	Name	Description

References

URL	Source
https://wpscan.com/vulnerability/a3463d5a-8215-4958-a6c0-039681c35a50/	contact@wpscan.com

This website uses the NVD API, but is not approved or certified by it.

CVE-2024-8379