Skip to content

CVE-2024-11267

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
April 17, 2026
Last Seen
April 17, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

A critical SQL Injection vulnerability (CVE-2024-11267) has been identified in the JSP Store Locator WordPress plugin, rated CVSS 8.8. This vulnerability allows registered users with low privileges to execute SQL injection attacks without requiring victim interaction. Affected users can potentially...

Public Exploits

Checking GitHub for proof-of-concept code…