CVE-2024-12613

CVE-2024-12613 is a high-severity SQL Injection vulnerability affecting the Passwords Manager plugin for WordPress, specifically versions up to and including 1.4.8. This flaw allows unauthenticated attackers to inject malicious SQL queries due to insufficient input sanitization, potentially leading to the extraction of sensitive database information. The vulnerability has a CVSS score of 7.5, indicating a high risk, and can be exploited over the network with low attack complexity and no user interaction. While there is no evidence of active exploitation, publicly available exploit code, or significant community discussion, organizations using the affected plugin should prioritize patching to mitigate this risk.