SQL Injection Risk in SeedProd Pro Plugin Affecting WordPress
CVE-2024-54283

7.6HIGH

Key Information:

Vendor

WordPress
Status
Seedprod Pro
Vendor
CVE Published:
16 December 2024

What is CVE-2024-54283?

CVE-2024-54283 is a critical security vulnerability affecting SeedProd Pro, a WordPress plugin developed by SeedProd LLC. The vulnerability arises from improper neutralization of special elements used in SQL commands, allowing attackers to perform SQL Injection attacks. This can lead to unauthorized access to the database, potential data leakage, and complete compromise of the affected WordPress site. SeedProd Pro versions from n/a through 6.18.10 are impacted. Website administrators should update to the latest version immediately to mitigate these risks and protect sensitive data.

Affected Version(s)

SeedProd Pro <= 6.18.10

References

https://patchstack.com/database/wordpress/plugin/seedprod...
vdb-entry

CVSS V3.1

Score:
7.6
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Trương Hữu Phúc (truonghuuphuc)
.