{"cve":"CVE-2024-50498","epss":{"score":0.52905},"mitre":{"cpes":[],"created":"2024-10-28T11:24:26.938000+00:00","description":"Improper Control of Generation of Code ('Code Injection') vulnerability in Ajit Bohra WP Query Console wp-query-console allows Code Injection.This issue affects WP Query Console: from n/a through <= 1.0.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"},"cvssV4_0":{}},"mitre_repo_path":"cves/2024/50xxx/CVE-2024-50498.json","references":["https://patchstack.com/database/Wordpress/Plugin/wp-query-console/vulnerability/wordpress-wp-query-console-plugin-1-0-remote-code-execution-rce-vulnerability?_s_id=cve"],"title":"WordPress WP Query Console plugin <= 1.0 - Remote Code Execution (RCE) vulnerability","updated":"2026-04-28T16:10:30.345000+00:00","vendors":[],"weaknesses":["CWE-94"]},"nvd":{"cpes":["cpe:2.3:a:lubus:wp_query_console:*:*:*:*:*:wordpress:*:*"],"created":"2024-10-28T12:15:17.177000+00:00","description":"Improper Control of Generation of Code ('Code Injection') vulnerability in Ajit Bohra WP Query Console wp-query-console allows Code Injection.This issue affects WP Query Console: from n/a through <= 1.0.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":10.0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"},"cvssV4_0":{}},"nvd_repo_path":"2024/CVE-2024-50498.json","references":["https://github.com/JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2024-50498","https://patchstack.com/database/Wordpress/Plugin/wp-query-console/vulnerability/wordpress-wp-query-console-plugin-1-0-remote-code-execution-rce-vulnerability?_s_id=cve"],"title":null,"updated":"2026-06-17T08:04:35.057000+00:00","vendors":["lubus","lubus$PRODUCT$wp_query_console"],"weaknesses":["CWE-94"]},"opencve":{"changes":[{"created":"2024-10-28T11:30:00+00:00","data":[{"details":{"new":"Improper Control of Generation of Code ('Code Injection') vulnerability in LUBUS WP Query Console allows Code Injection.This issue affects WP Query Console: from n/a through 1.0.","old":null},"type":"description"},{"details":{"new":"WordPress WP Query Console plugin <= 1.0 - Remote Code Execution (RCE) vulnerability","old":null},"type":"title"},{"details":{"added":["CWE-94"],"removed":[]},"type":"weaknesses"},{"details":{"added":["https://patchstack.com/database/vulnerability/wp-query-console/wordpress-wp-query-console-plugin-1-0-remote-code-execution-rce-vulnerability?_s_id=cve"],"removed":[]},"type":"references"},{"details":{"added":{"cvssV3_1":{"score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"}},"removed":{},"updated":{}},"type":"metrics"}],"id":"4103a0a2-8afd-4519-8183-ff64eee8ad19"},{"created":"2024-10-28T13:15:00+00:00","data":[{"details":["lubus","lubus$PRODUCT$wp_querey_table"],"type":"first_time"},{"details":{"added":["cpe:2.3:a:lubus:wp_querey_table:*:*:*:*:*:*:*:*"],"removed":[]},"type":"cpes"},{"details":{"added":["lubus","lubus$PRODUCT$wp_querey_table"],"removed":[]},"type":"vendors"},{"details":{"added":{"ssvc":{"options":{"Automatable":"yes","Exploitation":"poc","Technical Impact":"total"},"version":"2.0.3"}},"removed":{},"updated":{}},"type":"metrics"}],"id":"578d4ec0-6c93-46f0-9911-60546a7e8555"},{"created":"2024-10-31T01:45:00+00:00","data":[{"details":["lubus$PRODUCT$wp_query_console"],"type":"first_time"},{"details":{"added":["cpe:2.3:a:lubus:wp_query_console:*:*:*:*:*:wordpress:*:*"],"removed":[]},"type":"cpes"},{"details":{"added":["lubus$PRODUCT$wp_query_console"],"removed":[]},"type":"vendors"}],"id":"768e45dd-b29a-47a6-b4dd-0da37dc5e6fe"},{"created":"2025-07-16T13:45:00+00:00","data":[{"details":{"added":{},"removed":{},"updated":{"epss":{"new":{"score":0.92331},"old":{"score":0.92184}}}},"type":"metrics"}],"id":"d7e6aaea-5b4e-4f8f-8b37-ea1e3e13adee"},{"created":"2026-01-23T16:30:00+00:00","data":[{"details":{"added":["https://github.com/JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2024-50498"],"removed":[]},"type":"references"}],"id":"98e1957e-2f7b-4487-baaf-c3dd88906e67"},{"created":"2026-04-01T23:45:00+00:00","data":[{"details":{"new":"Improper Control of Generation of Code ('Code Injection') vulnerability in Ajit Bohra WP Query Console wp-query-console allows Code Injection.This issue affects WP Query Console: from n/a through <= 1.0.","old":"Improper Control of Generation of Code ('Code Injection') vulnerability in LUBUS WP Query Console allows Code Injection.This issue affects WP Query Console: from n/a through 1.0."},"type":"description"},{"details":{"added":["https://patchstack.com/database/Wordpress/Plugin/wp-query-console/vulnerability/wordpress-wp-query-console-plugin-1-0-remote-code-execution-rce-vulnerability?_s_id=cve"],"removed":["https://patchstack.com/database/vulnerability/wp-query-console/wordpress-wp-query-console-plugin-1-0-remote-code-execution-rce-vulnerability?_s_id=cve"]},"type":"references"},{"details":{"added":{},"removed":{},"updated":{"cvssV3_1":{"new":{"score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"old":{"score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"}}}},"type":"metrics"}],"id":"370e0406-50fb-425a-958a-745a13a392dd"},{"created":"2026-04-23T15:00:00+00:00","data":[{"details":{"added":{},"removed":{},"updated":{"cvssV3_1":{"new":{"score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"},"old":{"score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}}}},"type":"metrics"}],"id":"729ee5ba-2a45-4ec7-9a2c-4bbb2623c3bf"}],"cpes":{"data":["cpe:2.3:a:lubus:wp_querey_table:*:*:*:*:*:*:*:*","cpe:2.3:a:lubus:wp_query_console:*:*:*:*:*:wordpress:*:*"],"providers":["nvd","vulnrichment"]},"created":{"data":"2024-10-28T11:24:26.938000+00:00","provider":"mitre"},"description":{"data":"Improper Control of Generation of Code ('Code Injection') vulnerability in Ajit Bohra WP Query Console wp-query-console allows Code Injection.This issue affects WP Query Console: from n/a through <= 1.0.","provider":"mitre"},"metrics":{"cvssV2_0":{"data":{},"provider":null},"cvssV3_0":{"data":{},"provider":null},"cvssV3_1":{"data":{"score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"},"provider":"mitre"},"cvssV4_0":{"data":{},"provider":null},"epss":{"data":{"score":0.52905},"provider":"first"},"kev":{"data":{},"provider":null},"ssvc":{"data":{"options":{"Automatable":"yes","Exploitation":"poc","Technical Impact":"total"},"version":"2.0.3"},"provider":"vulnrichment"},"threat_severity":{"data":null,"provider":null}},"references":{"data":["https://github.com/JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2024-50498","https://patchstack.com/database/Wordpress/Plugin/wp-query-console/vulnerability/wordpress-wp-query-console-plugin-1-0-remote-code-execution-rce-vulnerability?_s_id=cve"],"providers":["mitre","nvd"]},"title":{"data":"WordPress WP Query Console plugin <= 1.0 - Remote Code Execution (RCE) vulnerability","provider":"mitre"},"updated":{"data":"2026-04-23T15:20:04.087000+00:00","provider":"nvd"},"vendors":{"data":["lubus","lubus$PRODUCT$wp_querey_table","lubus$PRODUCT$wp_query_console"],"providers":["nvd","vulnrichment"]},"weaknesses":{"data":["CWE-94"],"providers":["mitre","nvd"]}},"vulnrichment":{"cpes":["cpe:2.3:a:lubus:wp_querey_table:*:*:*:*:*:*:*:*"],"created":"2024-10-28T11:24:26.938000+00:00","description":"Improper Control of Generation of Code ('Code Injection') vulnerability in Ajit Bohra WP Query Console wp-query-console allows Code Injection.This issue affects WP Query Console: from n/a through <= 1.0.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{},"kev":{},"ssvc":{"options":{"Automatable":"yes","Exploitation":"poc","Technical Impact":"total"},"version":"2.0.3"}},"references":[],"title":"WordPress WP Query Console plugin <= 1.0 - Remote Code Execution (RCE) vulnerability","updated":"2024-10-28T12:14:57.899000+00:00","vendors":["lubus","lubus$PRODUCT$wp_querey_table"],"vulnrichment_repo_path":"2024/50xxx/CVE-2024-50498.json","weaknesses":[]}}