WordPress Lodgix.com Vacation Rental Website Builder plugin <= 3.9.73 - SQL Injection vulnerability

CVE-2024-50539

What is CVE-2024-50539?

A security flaw has been identified in the Lodgix.com Vacation Rental Website Builder, characterized by the improper neutralization of special elements used in SQL commands. This vulnerability allows for SQL Injection attacks, which can permit an attacker to execute arbitrary SQL code. Affected versions of the product include those up to 3.9.73. Exploiting this vulnerability could potentially lead to unauthorized access to sensitive data, alterations in database information, and other malicious activities that compromise the integrity and security of the web application.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References