{ "id": "CVE-2024-0566", "sourceIdentifier": "contact@wpscan.com", "published": "2024-02-12T16:15:08.673", "lastModified": "2024-02-12T17:31:21.670", "vulnStatus": "Awaiting Analysis", "descriptions": [ { "lang": "en", "value": "The Smart Manager WordPress plugin before 8.28.0 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin." } ], "metrics": {}, "references": [ { "url": "https://wpscan.com/vulnerability/ca83db95-4a08-4615-aa8d-016022404c32/", "source": "contact@wpscan.com" } ] }