SQL Injection Vulnerability Affects User Activity Log Pro

CVE-2024-32137

What is CVE-2024-32137?

An SQL injection vulnerability has been identified in the User Activity Log Pro plugin by Solwin. This issue occurs due to improper neutralization of special elements within SQL commands, allowing an attacker to manipulate queries made to the database. Successful exploitation of this vulnerability can lead to unauthorized access, data extraction, and potential compromise of the application's integrity. This affects versions of User Activity Log Pro ranging from n/a through 2.3.4, highlighting the importance of immediate remediation and secure coding practices.

References