CVE-2024-31077

CVE-2024-31077 is a critical SQL injection vulnerability affecting Forminator versions prior to 1.29.3, a WordPress plugin. This high-severity flaw (CVSS 7.2) allows remote authenticated attackers with administrative privileges to achieve full data compromise (confidentiality, integrity, availability) and potentially cause a denial-of-service. While there is no known active exploitation or public exploit code (KEV: No, Metasploit/Nuclei/ExploitDB: None), the vulnerability has garnered significant community discussion and media coverage, indicating awareness and potential for future exploitation.