CVE-2024-36082

Published: Jun 7, 2024

Modified: Oct 30, 2024

PUBLISHED

Description

SQL injection vulnerability in Music Store - WordPress eCommerce versions prior to 1.1.14 allows a remote authenticated attacker with an administrative privilege to execute arbitrary SQL commands. Information stored in the database may be obtained or altered by the attacker.

Vendor	Product	Versions
CodePeople	Music Store - WordPress eCommerce	affected `prior to 1.1.14`

References

https://wordpress.org/plugins/music-store/

https://plugins.trac.wordpress.org/changeset?new=3085975%40music-store%2Ftrunk%2Fmusic-store.php&old=3079647%40music-store%2Ftrunk%2Fmusic-store.php

https://jvn.jp/en/jp/JVN79213252/

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2024-36082

Description

Affected Products

References