← WordPress Vulnerabilities
WordPress security by component

Express Payments Module

Express Payments Module is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Nov 28, 2024; the highest CVE/CNA score is 9.3.

Plugin slug: express-pay

CVE-2024-52474: Express Payments Module: SQL injection

Express Payments Module is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.

PublishedNov 28, 2024
Safe version guidanceSee mitigation notes
Safe version
Nov 28, 2024 CVE-2024-52474
Express Payments Module: SQL injection
Express Payments Module is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE9.3
NVDPending