Classic Editor and Classic Widgets, CVE-2024-47312

CVE, Research URL: CVE-2024-47312
Home page URL: Security reports for Classic Editor and Classic Widgets
Application: Classic Editor and Classic Widgets
Published on: Oct 17, 2024
Research Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPGrim Classic Editor and Classic Widgets allows SQL Injection.This issue affects Classic Editor and Classic Widgets: from n/a through 1.4.1.
Affected versions: max 1.4.2.
Status: vulnerable