Vulnerability Details CVE-2024-6926
The Viral Signup WordPress plugin through 2.1 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection
Exploit prediction scoring system (EPSS) score
EPSS Score 0.714
EPSS Ranking 98.6%
CVSS Severity
CVSS v3 Score 9.8
Products affected by CVE-2024-6926
-
cpe:2.3:a:wow-company:viral_signup:-
-
cpe:2.3:a:wow-company:viral_signup:2.1