CVE-2024-6928 Information

Description

The Opti Marketing WordPress plugin through 2.0.9 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users leading to a SQL injection.

Reference

https://wpscan.com/vulnerability/7bb9474f-2b9d-4856-b36d-a43da3db0245/