CVE-2024-38693: WordPress WP User Frontend plugin <= 4.0.7 - SQL Injection vulnerability
Published Aug 29, 2024
·Updated
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in weDevs WP User Frontend allows SQL Injection.This issue affects WP User Frontend: from n/a through 4.0.7.
Affected Software
1 affected component
weDevs Wp User Frontend Wordpress<4.0.8
Remediation
Information
Update to 4.0.8 or a higher version.
Event History
Aug 29, 2024
CVE Published
via MITRE·02:05 PM
Data Sourced
via MITRE·02:05 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-38693?
CVE-2024-38693 has been classified as a medium severity SQL Injection vulnerability.
2
How do I fix CVE-2024-38693?
To fix CVE-2024-38693, update the WP User Frontend plugin to version 4.0.8 or later.
3
What versions of WP User Frontend are affected by CVE-2024-38693?
CVE-2024-38693 affects all versions of WP User Frontend up to and including 4.0.7.
4
What is the impact of CVE-2024-38693 on my website?
CVE-2024-38693 allows attackers to perform SQL Injection, potentially leading to unauthorized access to your database.
5
Is CVE-2024-38693 a known vulnerability?
Yes, CVE-2024-38693 is a publicly documented vulnerability recognized in the cybersecurity community.