CVE-2024-49621

WordPress APA Register Newsletter Form plugin <= 1.0.0 - CSRF to SQL Injection vulnerability

8.2 High

Cross-Site Request Forgery (CSRF) vulnerability in aatmaadhikari APA Register Newsletter Form apa-register-newsletter-form allows SQL Injection.This issue affects APA Register Newsletter Form: from n/a through <= 1.0.0.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: Low

Exploit likelihood

0.23%Up 0.2 points since Oct 21, 2024

What each source reports

CVE List Score used 8.2

WordPress APA Register Newsletter Form plugin <= 1.0.0 - CSRF to SQL Injection vulnerability

Record: CVE-2024-49621
CVSS 3.1: 8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:L
Weakness: CWE-352
Updated: 2026-11-02

EUVDEUVD-2024-43484 8.2

Record: EUVD-2024-43484
CVSS 3.1: 8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:L
Updated: 2026-11-02

GitHub AdvisoriesGHSA-ccgc-q7p3-v5g4 8.2

Cross-Site Request Forgery (CSRF) vulnerability in Apa APA Register Newsletter Form allows SQL...

Cross-Site Request Forgery (CSRF) vulnerability in Apa APA Register Newsletter Form allows SQL Injection.This issue affects APA Register Newsletter Form: from n/a through 1.0.0.

Record: GHSA-ccgc-q7p3-v5g4
CVSS 3.1: 8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:L
Weakness: CWE-352
Updated: 2026-11-02

NVD 8.2

Record: CVE-2024-49621
CVSS 3.1: 8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:L
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-352
Updated: 2026-11-02

Affected products

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-49621 is a high vulnerability (CVSS 8.2) in Aatmaadhikari Apa Register Newsletter Form, published October 20, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.23%, the 14th percentile. No source names a fixed version.