CVE-2024-30245 – WordPress DecaLog plugin <= 3.9.0 - SQL Injection vulnerability

https://notcve.org/view.php?id=CVE-2024-30245

26 Mar 2024 — Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DecaLog.This issue affects DecaLog: from n/a through 3.9.0. Neutralización inadecuada de elementos especiales utilizados en una vulnerabilidad de comando SQL ('inyección SQL') en DecaLog. Este problema afecta a DecaLog: desde n/a hasta 3.9.0. The DecaLog plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 3.9.0 due to insufficient escaping on the user supplied parameter... • https://patchstack.com/database/vulnerability/decalog/wordpress-decalog-plugin-3-9-0-sql-injection-vulnerability?_s_id=cve • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •