🔐 CVE Alert

CVE-2024-55972

UNKNOWN 0.0

WordPress eTemplates plugin <= 0.2.1 - SQL Injection vulnerability

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in chriscarvache eTemplates etemplates allows SQL Injection.This issue affects eTemplates: from n/a through <= 0.2.1.

CWE CWE-89
Vendor chriscarvache
Product etemplates
Published Dec 16, 2024
Last Updated Apr 1, 2026
Stay Ahead of the Next One

Get instant alerts for chriscarvache etemplates

Be the first to know when new unknown vulnerabilities affecting chriscarvache etemplates are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

chriscarvache / eTemplates
0 ≤ 0.2.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗
patchstack.com: https://patchstack.com/database/Wordpress/Plugin/etemplates/vulnerability/wordpress-etemplates-plugin-0-2-1-sql-injection-vulnerability?_s_id=cve

Credits

João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program