SQL Injection Vulnerability in Download-Mirror-Counter Allows for Attacks

CVE-2024-51621

What is CVE-2024-51621?

The Reza Sh Download-Mirror-Counter Plugin is vulnerable to an SQL injection attack due to improper neutralization of special elements used in SQL commands. This flaw allows attackers to manipulate backend database queries by injecting malicious SQL code. The vulnerability impacts all versions of the Download-Mirror-Counter Plugin up to version 1.1, thereby exposing websites to unauthorized data access and potential compromise. Web administrators should take immediate action to apply patches and secure their installations against this type of injection attack.

References