← WordPress Vulnerabilities
WordPress security by component

Advanced Floating Content

Advanced Floating Content is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Dec 24, 2024; the highest CVE/CNA score is 6.5.

Plugin slug: advanced-floating-content

CVE-2024-12031: Advanced Floating Content: SQL injection

Advanced Floating Content is affected by SQL injection. Exploitation requires at least subscriber-level access. A successful request can alter database queries and expose or modify WordPress data.

PublishedDec 24, 2024
Safe version guidanceSee mitigation notes
Safe version
Dec 24, 2024 CVE-2024-12031
Advanced Floating Content: SQL injection
Advanced Floating Content is affected by SQL injection. Exploitation requires at least subscriber-level access. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE6.5
NVDPending