Description
WordPress LayerSlider插件存在SQL注入漏洞，攻击者可以通过构造恶意请求获取数据库中的敏感信息，可能导致数据泄露、篡改或破坏。
WordPress LayerSlider 插件 /wp-admin/admin-ajax.php id SQL 注入漏洞（CVE-2024-2879）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-2879
https://blog.qualys.com/vulnerabilities-threat-research/2024/04/22/wordpress-layerslider-plugin-sql-injection-vulnerability
https://github.com/herculeszxc/CVE-2024-2879
https://www.securityblue.team/blog/posts/Critical-Vulnerability-in-WordPress-Plugin-LayerSlider
https://www.sentinelone.com/vulnerability-database/cve-2024-2879/
https://www.cvedetails.com/cve/CVE-2024-2879/
https://www.wordfence.com/blog/2024/04/5500-bounty-awarded-for-unauthenticated-sql-injection-vulnerability-patched-in-layerslider-wordpress-plugin/
https://vulners.com/cve/CVE-2024-2879
https://it.idocdown.com/app/articles/blogs/detail/11638
https://layerslider.com/release-log/