CVE-2024-35678: WordPress Contact Form to DB by BestWebSoft plugin <= 1.7.2 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BestWebSoft Contact Form to DB by BestWebSoft.This issue affects Contact Form to DB by BestWebSoft: from n/a through 1.7.2.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35678?
CVE-2024-35678 is considered a high severity vulnerability due to its potential for SQL injection.
How do I fix CVE-2024-35678?
To fix CVE-2024-35678, update the BestWebSoft Contact Form to DB plugin to version 1.7.3 or later.
What types of systems are affected by CVE-2024-35678?
CVE-2024-35678 affects the BestWebSoft Contact Form to DB plugin versions up to 1.7.2 on WordPress sites.
What is the nature of the vulnerability identified in CVE-2024-35678?
CVE-2024-35678 is an SQL injection vulnerability resulting from improper neutralization of special elements in SQL commands.
Are there any known exploits for CVE-2024-35678?
Details about specific exploits for CVE-2024-35678 have not been publicly documented, but the nature of SQL injection suggests it could be easily exploited.