Medium severity4.1NVD Advisory· Published Mar 25, 2025· Updated Jun 17, 2026
CVE-2024-10638
CVE-2024-10638
Description
The Product Labels For Woocommerce (Sale Badges) WordPress plugin before 1.5.11 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <1.5.11
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/32a7a778-2211-45b4-bdc2-528f27b7d4fe/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.