Security Advisory

CVE-2024-12735

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-05-15 20:06:55
Last updated 2025-05-20 19:31:08
Assigner WPScan
State PUBLISHED

Description

The Advance Post Prefix WordPress plugin through 1.1.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins and above to perform SQL injection attacks