Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2024-3552

The Web Directory Free WordPress plugin before 1.7.0 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection with different techniques like UNION, Time-Based and Error-Based.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.932
EPSS Ranking 99.8%
CVSS Severity
CVSS v3 Score 9.8
Products affected by CVE-2024-3552


Contact Us

Shodan ® - All rights reserved