Medium severity4.1NVD Advisory· Published Mar 25, 2025· Updated Jun 17, 2026

CVE-2024-12109

Description

The Product Labels For Woocommerce (Sale Badges) WordPress plugin before 1.5.9 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Aco Product Labels For Woocommercecpe-rescue
Package: https://wordpress.org/plugins/aco-product-labels-for-woocommerce
WordPress/Product Labels For Woocommerce (Sale Badges)llm-fuzzy
Range: <1.5.9

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/2eca2f88-c843-4794-8cd9-46f17c92753a/nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.267
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000