CVE-2024-32136: WordPress BWL Advanced FAQ Manager plugin…

Record summary

CVE-2024-32136 has a selected CVSS score of 7.6 (high); EIP currently links 1 repository PoC.

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Xenioushk BWL Advanced FAQ Manager.This issue affects BWL Advanced FAQ Manager: from n/a through 2.0.3.

Description source: CVE List

Exploitation context

Available material

Repository PoCs: 1

CISA SSVC decision

ExploitationNone

AutomatableNo

Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 18, 2024 · Source: CVE List

Affected products and versions

Product	Source	Version range	Status
BWL Advanced FAQ Manager Browse Xenioushk / BWL Advanced FAQ Manager Default status: unaffected	CVE List	Through 2.0.3	affected

Proofs of concept

Repository PoCs

GitHubxbz0n/CVE-2024-32136Repository PoCby xbz0n3Not analyzed1 file

2.5 KiB

GitHub

PoC details

References

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2024-32136

patchstack.comvdb entry

https://patchstack.com/database/vulnerability/bwl-advanced-faq-manager/wordpress-bwl-advanced-faq-manager-plugin-2-0-3-sql-injection-vulnerability?_s_id=cve