CVE-2024-5057: WordPress Easy Digital Downloads plugin <= 3.2.12 - SQL Injection vulnerability
Published Aug 29, 2024
·Updated
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Easy Digital Downloads allows SQL Injection.This issue affects Easy Digital Downloads: from n/a through 3.2.12.
Affected Software
1 affected component
Awesomemotive Easy Digital Downloads Wordpress<=3.2.12
Remediation
Information
Update to 3.3.1 or a higher version.
Event History
Aug 29, 2024
CVE Published
via MITRE·02:04 PM
Data Sourced
via MITRE·02:04 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-5057?
CVE-2024-5057 is considered a critical vulnerability due to its potential to allow SQL injection attacks.
2
How do I fix CVE-2024-5057?
To remediate CVE-2024-5057, update Easy Digital Downloads to version 3.2.13 or later.
3
What are the consequences of exploiting CVE-2024-5057?
Exploitation of CVE-2024-5057 can lead to unauthorized access to the database, data manipulation, and potential data breaches.
4
Which versions of Easy Digital Downloads are affected by CVE-2024-5057?
CVE-2024-5057 affects all versions of Easy Digital Downloads from n/a to 3.2.12.
5
Is CVE-2024-5057 a common vulnerability?
SQL injection vulnerabilities like CVE-2024-5057 are common in web applications and require immediate attention to prevent exploitation.