Download Monitor Vulnerable to SQL Injection

CVE-2024-30501

What is CVE-2024-30501?

An SQL Injection vulnerability exists in the WPChill Download Monitor plugin, which allows attackers to manipulate SQL queries executed by the application. This vulnerability can be exploited by sending specially crafted SQL commands that bypass security controls, leading to unauthorized access to sensitive data. Affected versions include all prior to 4.9.4. Organizations using this plugin should implement immediate security measures to mitigate potential risks associated with this vulnerability.

References