High · 8.5 CVE-2024-34412 EUVD-2024-34773GHSA-rgrm-rq44-w47f

WordPress ParcelPanel plugin <= 3.8.1 - Auth. SQL Injection vulnerability

Published May 6, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Parcel Panel Product: ParcelPanel

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Parcel Panel ParcelPanel.This issue affects ParcelPanel: from n/a through 3.8.1.

Affected products

Vendor	Product	Affected	Fixed
Parcel Panel	ParcelPanel	≤ 3.8.1	—

References

https://patchstack.com/database/vulnerability/parcelpanel/wordpress-parcelpanel-plugin-3-8-1-subscriber-sql-injection-vulnerability?_s_id=cve vdb-entry