SQL Injection Vulnerability in GeoDirectory – WP Business Directory Plugin

CVE-2024-13507

What is CVE-2024-13507?

The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is susceptible to a time-based SQL Injection vulnerability. This arises from insufficient escaping of the user-supplied 'dist' parameter and inadequate preparation within the SQL queries, allowing unauthenticated attackers to manipulate existing queries. Exploiting this flaw enables them to append additional SQL commands, potentially leading to unauthorized access to sensitive database information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References