First published: Sat Nov 09 2024(Updated: )
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Micah Blu RSVP ME allows SQL Injection.This issue affects RSVP ME: from n/a through 1.9.9.
Credit: audit@patchstack.com
Affected Software | Affected Version | How to fix |
---|---|---|
Micahblu Rsvp Me | <=1.9.9 | |
WordPress RSVP ME plugin | <=1.9.9 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-50544 is considered a critical SQL Injection vulnerability that can lead to unauthorized access to the database.
To fix CVE-2024-50544, users should update the Micah Blu RSVP ME software or WordPress RSVP ME plugin to version 1.9.10 or later.
Exploiting CVE-2024-50544 can allow attackers to manipulate SQL queries, potentially exposing sensitive data or modifying database content.
CVE-2024-50544 affects all versions of Micah Blu RSVP ME and WordPress RSVP ME plugin up to and including version 1.9.9.
Yes, a patch is available in the form of an update to version 1.9.10 or higher for both Micah Blu RSVP ME and the WordPress RSVP ME plugin.