First published: Fri Mar 29 2024(Updated: )
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in I Thirteen Web Solution WP Responsive Tabs horizontal vertical and accordion Tabs.This issue affects WP Responsive Tabs horizontal vertical and accordion Tabs: from n/a through 1.1.17.
Credit: audit@patchstack.com
Affected Software | Affected Version | How to fix |
---|---|---|
I Thirteen Web Solution WP Responsive Tabs | <=1.1.17 | |
WordPress WP Responsive Tabs horizontal vertical and accordion Tabs | <=1.1.17 |
Update to 1.1.18 or a higher version.
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-30497 has been classified as a medium severity SQL Injection vulnerability.
To fix CVE-2024-30497, update the WP Responsive Tabs horizontal vertical and accordion Tabs plugin to version 1.1.18 or later.
CVE-2024-30497 affects all versions of the WP Responsive Tabs horizontal vertical and accordion Tabs plugin up to and including version 1.1.17.
Attackers can exploit CVE-2024-30497 to execute arbitrary SQL queries on the database.
Currently, the best workaround for CVE-2024-30497 is to disable the WP Responsive Tabs horizontal vertical and accordion Tabs plugin until an update is applied.