CVE-2024-49681

{"id": "CVE-2024-49681", "cveTags": [], "metrics": {}, "published": "2024-10-24T12:15:02.890", "references": [{"url": "https://patchstack.com/database/Wordpress/Plugin/activitytime/vulnerability/wordpress-wp-sessions-time-monitoring-full-automatic-plugin-1-0-9-sql-injection-vulnerability?_s_id=cve", "source": "audit@patchstack.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "audit@patchstack.com", "description": [{"lang": "en", "value": "CWE-89"}]}], "descriptions": [{"lang": "en", "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in activity-log.com WP Sessions Time Monitoring Full Automatic activitytime allows SQL Injection.This issue affects WP Sessions Time Monitoring Full Automatic: from n/a through <= 1.0.9."}, {"lang": "es", "value": "Vulnerabilidad de neutralizaci\u00f3n incorrecta de elementos especiales utilizados en un comando SQL ('Inyecci\u00f3n SQL') en SWIT WP Sessions Time Monitoring Full Automatic permite la inyecci\u00f3n SQL. Este problema afecta a WP Sessions Time Monitoring Full Automatic: desde n/a hasta 1.0.9."}], "lastModified": "2026-04-15T00:35:42.020", "sourceIdentifier": "audit@patchstack.com"}