Description
Improper Control of Generation of Code ('Code Injection') vulnerability in Ajit Bohra WP Query Console wp-query-console allows Code Injection.This issue affects WP Query Console: from n/a through <= 1.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ajit Bohra | WP Query Console | ≤ 1.0 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 5 repositories
-
RandomRobbieBF/CVE-2024-50498 ★ 3 · Nov 4, 2024
WP Query Console <= 1.0 - Unauthenticated Remote Code Execution
-
JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2024-50498 ★ 1 · Jan 22, 2026
Unauthenticated 0-click RCE exploit for CVE-2024-50498. Exploits a code injection vulnerability in the LUBUS WP Query Console plugin to execute arbitrary PHP code, write a web shell to the uploads di…
-
p0et08/CVE-2024-50498 ★ 1 · Dec 4, 2024
This is a exploit for CVE-2024-50498
-
androidteacher/CVE-2024-50498-wpquery ★ 0 · Jan 27, 2026
-
Nxploited/CVE-2024-50498 ★ 0 · Jan 3, 2025
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- WP Query Console <= 1.0 - Remote Code Execution http/cves/2024/CVE-2024-50498.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.