CVE-2024-30535: WordPress Easy Form Builder plugin <= 3.7.4 - SQL Injection vulnerability
Published Mar 31, 2024
·Updated
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WhiteStudio Easy Form Builder.This issue affects Easy Form Builder: from n/a through 3.7.4.
Affected Software
1 affected component
Whitestudio Easy Form Builder (WordPress plugin)<=3.7.4
Remediation
Information
Update to 3.7.5 or a higher version.
Event History
Mar 31, 2024
CVE Published
via MITRE·06:16 PM
Data Sourced
via MITRE·06:16 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-30535?
CVE-2024-30535 is classified as a critical SQL Injection vulnerability.
2
How do I fix CVE-2024-30535?
To fix CVE-2024-30535, upgrade the WhiteStudio Easy Form Builder to version 3.7.5 or later.
3
What versions are affected by CVE-2024-30535?
CVE-2024-30535 affects WhiteStudio Easy Form Builder versions from n/a up to 3.7.4.
4
Can CVE-2024-30535 be exploited remotely?
Yes, CVE-2024-30535 can be exploited remotely by an attacker with knowledge of SQL injection techniques.
5
What are the potential impacts of CVE-2024-30535?
The potential impacts of CVE-2024-30535 include unauthorized access to the database and data manipulation.