CVE-2024-50498 – WordPress WP Query Console plugin <= 1.0 - Remote Code Execution (RCE) vulnerability

https://notcve.org/view.php?id=CVE-2024-50498

25 Oct 2024 — Improper Control of Generation of Code ('Code Injection') vulnerability in LUBUS WP Query Console allows Code Injection.This issue affects WP Query Console: from n/a through 1.0. The WP Query Console plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0. This makes it possible for unauthenticated attackers to execute code on the server. • https://github.com/RandomRobbieBF/CVE-2024-50498 • CWE-94: Improper Control of Generation of Code ('Code Injection') •