CVE-2024-54280
Severity CVSS v4.0:
Pending analysis
Type:
CWE-89
SQL Injection
Publication date:
16/12/2024
Last modified:
27/06/2025
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Iqonic Design WPBookit allows SQL Injection.This issue affects WPBookit: from n/a through 1.6.0.
Impact
Base Score 3.x
9.30
Severity 3.x
CRITICAL
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:iqonic:wpbookit:*:*:*:*:pro:wordpress:*:* | 1.6.0 (including) |
To consult the complete list of CPE names with products and versions, see this page