Critical severity10.0NVD Advisory· Published Dec 13, 2024· Updated Apr 23, 2026

CVE-2024-54261

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in HK Digital Agency LLC TAX SERVICE Electronic HDM virtual-hdm-for-taxservice-am allows SQL Injection.This issue affects TAX SERVICE Electronic HDM: from n/a through <= 1.2.2.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Virtual Hdm For Taxservice Aminferred
Range: <= 1.2.2
Package: https://wordpress.org/plugins/virtual-hdm-for-taxservice-am
WordPress/Tax Service Electronic Hdmllm-fuzzy
Range: <= 1.2.2
Package: https://wordpress.org/plugins/tax-service-electronic-hdm

Patches

Vulnerability mechanics

References

patchstack.com/database/Wordpress/Plugin/virtual-hdm-for-taxservice-am/vulnerability/wordpress-tax-service-electronic-hdm-plugin-1-1-2-sql-injection-vulnerabilitynvd

News mentions

No linked articles in our index yet.

cvss	0.650
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000