CVE-2024-0566 Information

Description

The Smart Manager WordPress plugin before 8.28.0 does not properly sanitise and escape a parameter before using it in a SQL statement leading to a SQL injection exploitable by high privilege users such as admin.

Reference

https://wpscan.com/vulnerability/ca83db95-4a08-4615-aa8d-016022404c32/