CVE-2024-56284: WordPress SSL Wireless SMS Notification Plugin <= 3.5.0 - SQL Injection vulnerability
9.3
CVSS
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SSL Wireless SSL Wireless SMS Notification allows SQL Injection.This issue affects SSL Wireless SMS Notification: from n/a through 3.5.0.
Classification
CVE ID: CVE-2024-56284
CVSS Base Severity: CRITICAL
CVSS Base Score: 9.3
Affected Products
Vendor: SSL Wireless
Product: SSL Wireless SMS Notification
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.49% (scored less or equal to compared to others)
EPSS Date: 2025-02-05 (when was this score calculated)