VYPR
← All advisories
Medium severity6.5NVD Advisory· Published May 27, 2024· Updated Jun 17, 2026

CVE-2024-4533

CVE-2024-4533

Description

The KKProgressbar2 Free WordPress plugin through 1.1.4.2 does not sanitize and escape a parameter before using it in a SQL statement, allowing admin users to perform SQL injection attacks

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

14
  • WordPress/Kkprogressbar2 Freeinferred2 versions
    <=1.1.4.2+ 1 more
    • (no CPE)range: <=1.1.4.2
    • (no CPE)range: <=1.1.4.2
    Package: https://wordpress.org/plugins/kkprogressbar2-free
  • Krzysztof Furtak/Kkprogressbar211 versions
    cpe:2.3:a:krzysztof-furtak:kkprogressbar2:1.0.1:*:*:*:free:wordpress:*:*+ 10 more
    • cpe:2.3:a:krzysztof-furtak:kkprogressbar2:1.0.1:*:*:*:free:wordpress:*:*
    • cpe:2.3:a:krzysztof-furtak:kkprogressbar2:1.0:*:*:*:free:wordpress:*:*
    • cpe:2.3:a:krzysztof-furtak:kkprogressbar2:1.1.1:*:*:*:free:wordpress:*:*
    • cpe:2.3:a:krzysztof-furtak:kkprogressbar2:1.1.2:*:*:*:free:wordpress:*:*
    • cpe:2.3:a:krzysztof-furtak:kkprogressbar2:1.1.4.2:*:*:*:free:wordpress:*:*
    • cpe:2.3:a:krzysztof-furtak:kkprogressbar2:1.1.4:*:*:*:free:wordpress:*:*
    • cpe:2.3:a:krzysztof-furtak:kkprogressbar2:1.1:*:*:*:free:wordpress:*:*
    • cpe:2.3:a:krzysztof-furtak:kkprogressbar2:1.2:*:*:*:free:wordpress:*:*
    • cpe:2.3:a:krzysztof-furtak:kkprogressbar2:1.3.1:*:*:*:free:wordpress:*:*
    • cpe:2.3:a:krzysztof-furtak:kkprogressbar2:1.3.2:*:*:*:free:wordpress:*:*
    • cpe:2.3:a:krzysztof-furtak:kkprogressbar2:1.3:*:*:*:free:wordpress:*:*
  • osv-coords
    pkg:rpm/opensuse/traefik&distro=openSUSE%20Tumbleweed
    Range: < 3.4.3-1.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.