CVE-2024-35630 is a Blind SQL Injection vulnerability affecting the LJ Apps WP TripAdvisor Review Slider plugin, specifically versions up to and including 12.6. This high-severity vulnerability (CVSS 7.6) allows authenticated attackers with high privileges to execute arbitrary SQL commands, potentially leading to data compromise. While no public exploits or active exploitation have been observed, and community discussion is minimal, the potential for data confidentiality and availability impact remains significant.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 12.6CPE match | cpe:2.3:a:ljapps:wp_tripadvisor_review_slider:*:*:*:*:*:wordpress:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.3 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.