CVE-2024-7150

Summary

CVE-2024-7150 is a vulnerability affecting the Slider by 10Web plugin for WordPress. This issue allows authenticated attackers with Contributor-level access or higher to inject SQL queries through the 'id' parameter, which is insufficiently escaped and not properly prepared in existing queries. By appending these queries, attackers can extract sensitive information from the database. Versions up to and including 1.2.57 are impacted.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.