CVE-2024-9879

The Melapress File Monitor WordPress plugin before 2.1.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks

Score

CVSS 3.1 5.4 Medium

Status

Analyzed - contact@wpscan.com

Published

2025-05-15

Last modified

2025-05-16

Weaknesses

CWE-89

Affected products

• Melapress File Monitor (Melapress)
• Melapress File Monitor (Unknown)

References

• https://wpscan.com/vulnerability/cda54097-4aec-472e-a73f-31ecb76ebb23/