CVE-2024-6928
Opti Marketing <= 2.0.9 - Unauthenticated SQLi
The Opti Marketing WordPress plugin through 2.0.9 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.
CVSS 3.1 · 9.8 Critical
EPSS 3.3%
KEV · Not listed
Vendors
Products