{
"id": "CVE-2024-0566",
"sourceIdentifier": "contact@wpscan.com",
"published": "2024-02-12T16:15:08.673",
"lastModified": "2024-02-12T17:31:21.670",
"vulnStatus": "Awaiting Analysis",
"descriptions": [
"lang": "en",
"value": "The Smart Manager WordPress plugin before 8.28.0 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin."
}
],
"metrics": {},
"references": [
"url": "https://wpscan.com/vulnerability/ca83db95-4a08-4615-aa8d-016022404c32/",
"source": "contact@wpscan.com"
]