SQL Injection Vulnerability Affects Find Duplicates

CVE-2024-32127

What is CVE-2024-32127?

The vulnerability in the Find Duplicates plugin for WordPress arises from improper neutralization of special elements used in SQL commands, allowing attackers to execute arbitrary SQL queries. This SQL Injection can be exploited to manipulate database queries, potentially compromising sensitive data within affected installations. Users of versions up to 1.4.6 should take immediate action to mitigate this vulnerability by updating to the latest version and reviewing security protocols to prevent unauthorized database access.

References