CVE Database /
CVE-2024-51672
CVE · High
CVE-2024-51672 — BetterLinks – Link Shortener, Link Cloaking, Redirects, Affiliate Link Manager & MCP [betterlinks] < 2.1.8
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-51672
|
BetterLinks – Link Shortener, Link Cloaking, Redirects, Affiliate Link Manager & MCP [betterlinks] < 2.1.8 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
High
7.6
|
< 2.1.8
|
2.1.8 |
2024-11-01 |
—
|
CVE-2024-51672
The BetterLinks plugin through version 2.1.7 contains a SQL injection vulnerability where user-supplied input is not properly escaped and queries lack adequate preparation. Authenticated administrators and users with higher privileges can exploit this flaw to inject malicious SQL code into existing database queries and retrieve sensitive data. The vulnerability has been resolved in version 2.1.8 and later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings