Skip to content
OpenAdvisories

Archive

7 December 2024

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 7.5
    CVE-2024-12270 Public exploit

    Beautiful Taxonomy Filters <= 2.4.3 - Unauthenticated SQL Injection

    The Beautiful taxonomy filters plugin for WordPress is vulnerable to SQL Injection via the 'selects[0][term]' parameter in all versions up to, and including, 2.4.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation …