Archive
8 September 2024
Vulnerabilities first published on this day (UTC), newest first.
2 results · Clear filters · Feed
-
Critical 9.8CVE-2024-6924 Scanner template
TrueBooker < 1.0.3 - Multiple Unauthenticated SQLi
The TrueBooker WordPress plugin before 1.0.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.
-
Critical 9.8CVE-2024-6928 Scanner template
Opti Marketing <= 2.0.9 - Unauthenticated SQLi
The Opti Marketing WordPress plugin through 2.0.9 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.