CVE-2024-30237 HIGH

CVE-2024-30237: WordPress Slider by Supsystic plugin <= 1.8.10 - SQL Injection vulnerability

Vendor Supsystic

Product Slider by Supsystic

Weakness CWE-89 · SQLi

Published March 28, 2024

Last update April 28, 2026

View on NVD All CVEs

CVSS base score

7.6/10

Attack vector Network

Attack complexity Low

Privileges required High

User interaction None

Confidentiality High

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L

What the vulnerability does

01Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Supsystic Slider by Supsystic.This issue affects Slider by Supsystic: from n/a through 1.8.10.

Key dates

02Disclosure timeline

March 28, 2024 CVE published

April 28, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-30237 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html

Related vulnerabilities

04Related CVE

CVE-2025-39403 WordPress WPAMS plugin <= 44.0 (17-08-2023) - SQL Injection vulnerability CVE-2026-10155 Bdtask Multi-Store Inventory Management System Accounts Report Accounts.php accounts_report_search sql injection CVE-2019-1824 Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL Injection Vulnerabilities CVE-2026-4850 code-projects Simple Laundry System Parameter checkregisitem.php sql injection CVE-2023-6411 SQL injection in Voovi Social Networking Script