Description:

CVE-2024-0956 is a time-based SQL injection vulnerability in the WP ERP plugin for WordPress. It allows authenticated attackers with admin or accounting manager privileges to execute arbitrary SQL queries on the database, potentially leading to sensitive information disclosure.

Key Insights:

• SVRS Score: 42, indicating a moderate risk.
• Exploit Status: Active exploits have been published.
• CISA Warnings: The Cybersecurity and Infrastructure Security Agency (CISA) has warned of the vulnerability, calling for immediate and necessary measures.
• In the Wild: The vulnerability is actively exploited by hackers.

Mitigation Strategies:

• Update the WP ERP plugin to version 1.12.10 or later.
• Implement input validation and sanitization to prevent SQL injection attacks.
• Use a web application firewall (WAF) to block malicious requests.
• Regularly monitor logs for suspicious activity.

Additional Information:

If users have additional queries regarding this incident, they can use the 'Ask to Analyst' feature, contact SOCRadar directly, or open a support ticket for more information if necessary.