CVE-2024-49299: WordPress Surfer plugin <= 1.5.0.502 - SQL Injection vulnerability
Published Oct 17, 2024
·Updated
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Surfer Surfer surferseo allows SQL Injection.This issue affects Surfer: from n/a through <= 1.5.0.502.
Affected Software
1 affected component
Surfer Surfer (WordPress plugin)<=1.5.0.502
Event History
Oct 17, 2024
CVE Published
via MITRE·05:27 PM
Data Sourced
via MITRE·05:27 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-49299?
The severity of CVE-2024-49299 is critical due to its capability to allow SQL Injection attacks.
2
How do I fix CVE-2024-49299?
To fix CVE-2024-49299, update Surfer to the latest version beyond 1.5.0.502.
3
Which versions of Surfer are affected by CVE-2024-49299?
CVE-2024-49299 affects all versions of Surfer from n/a up to and including 1.5.0.502.
4
What is the impact of CVE-2024-49299?
The impact of CVE-2024-49299 is that an attacker can exploit the vulnerability to perform unauthorized SQL commands.
5
Does CVE-2024-49299 affect the Surfer plugin for WordPress?
Yes, CVE-2024-49299 also affects the Surfer plugin for WordPress up to version 1.5.0.502.