CVE-2024-55980
Published: 16 December 2024
Summary
CVE-2024-55980 is a critical-severity SQL Injection (CWE-89) vulnerability. Its CVSS base score is 9.3 (Critical).
Operationally, ranked in the top 8.7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
The vulnerability CVE-2024-55980 is an SQL injection issue (CWE-89) present in the Wr Age Verification WordPress plugin (wr-age-verification) authored by robindkumar. It affects all versions from n/a through 2.0.0 and carries a CVSS 3.1 score of 9.3.
Unauthenticated attackers can exploit the flaw remotely over the network with low attack complexity and no required user interaction or privileges. Successful exploitation allows high-impact disclosure of sensitive information along with limited effects on availability, and the changed scope indicates the compromise can extend beyond the vulnerable component.
The single referenced advisory from Patchstack documents the SQL injection vulnerability in the wr-age-verification plugin. The EPSS score remains flat at 0.0652 with no material increase after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-52880
Vulnerability details
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in robindkumar Wr Age Verification wr-age-verification allows SQL Injection.This issue affects Wr Age Verification: from n/a through <= 2.0.0.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.