Description:

CVE-2024-4845 is a SQL Injection vulnerability in the Icegram Express plugin for WordPress. It allows authenticated attackers with Subscriber-level access or higher to execute arbitrary SQL queries on the database, potentially leading to sensitive information disclosure.

Key Insights:

• High Severity: The CVSS score of 8.8 indicates a high severity vulnerability, requiring immediate attention.
• SVRS Score: The SOCRadar Vulnerability Risk Score (SVRS) of 38 suggests a moderate risk, indicating that the vulnerability is not as critical as others with higher SVRS scores.
• Exploitation: Active exploits have been published, making it likely that attackers are actively exploiting the vulnerability.

Mitigation Strategies:

• Update the Icegram Express plugin to version 5.7.23 or later.
• Implement input validation and sanitization to prevent malicious SQL queries from being executed.
• Regularly monitor logs for suspicious activity and investigate any unauthorized database access attempts.
• Consider using a web application firewall (WAF) to block malicious requests.

Additional Information:

• Threat Actors/APT Groups: No specific threat actors or APT groups have been identified as actively exploiting this vulnerability.
• CISA Warnings: The Cybersecurity and Infrastructure Security Agency (CISA) has not issued a warning for this vulnerability.
• In the Wild: There is no evidence that this vulnerability is being actively exploited in the wild.

If users have additional queries regarding this incident, they can use the 'Ask to Analyst' feature, contact SOCRadar directly, or open a support ticket for more information if necessary.