Critical severity9.9NVD Advisory· Published Apr 3, 2024· Updated Jun 17, 2026

CVE-2024-24707

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in Cwicly Builder, SL. Cwicly allows Code Injection.This issue affects Cwicly: from n/a through 1.4.0.2.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Cwiclyinferred2 versions
<=1.4.0.2+ 1 more
- (no CPE)range: <=1.4.0.2
- (no CPE)range: <=1.4.0.2
Package: https://wordpress.org/plugins/cwicly
Cwicly Builder, SL/Cwiclyllm-create
Range: <=1.4.0.2

Patches

Vulnerability mechanics

References

patchstack.com/database/vulnerability/cwicly/wordpress-cwicly-plugin-1-4-0-2-remote-code-execution-rce-vulnerabilitynvd
snicco.io/vulnerability-disclosure/cwicly/remote-code-execution-cwicly-1-4-0-2nvd

News mentions

No linked articles in our index yet.

cvss	0.643
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000