{"id":"CVE-2024-48020","aliases":["EUVD-2024-42892","GHSA-m5xc-rf64-37r2"],"status":"published","title":"WordPress Backup and Staging by WP Time Capsule plugin \u003c= 1.22.21 - SQL Injection vulnerability","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in revmakx Backup and Staging by WP Time Capsule wp-time-capsule allows SQL Injection.This issue affects Backup and Staging by WP Time Capsule: from n/a through \u003c= 1.22.21.","severity":{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00487,"percentile":0.42267,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2024-10-11T18:15:01Z","modified":"2026-06-17T07:58:06Z","products":[{"vendor":"revmakx","product":"backup and staging by wp time capsule"}],"references":[{"url":"https://patchstack.com/database/Wordpress/Plugin/wp-time-capsule/vulnerability/wordpress-backup-and-staging-by-wp-time-capsule-plugin-1-22-21-sql-injection-vulnerability?_s_id=cve","tags":["vdb-entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-48020"},{"url":"https://patchstack.com/database/vulnerability/wp-time-capsule/wordpress-backup-and-staging-by-wp-time-capsule-plugin-1-22-21-sql-injection-vulnerability?_s_id=cve"},{"url":"https://github.com/advisories/GHSA-m5xc-rf64-37r2"}],"sources":{"cve":[{"id":"CVE-2024-48020","title":"WordPress Backup and Staging by WP Time Capsule plugin \u003c= 1.22.21 - SQL Injection vulnerability","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in revmakx Backup and Staging by WP Time Capsule wp-time-capsule allows SQL Injection.This issue affects Backup and Staging by WP Time Capsule: from n/a through \u003c= 1.22.21.","status":"published","published":"2024-10-11T18:15:01.86Z","modified":"2026-04-28T16:10:21.017Z","cvss":[{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L","level":"high","assessor":"cna"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:34:11.97482Z"}],"euvd":[{"id":"EUVD-2024-42892","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in revmakx Backup and Staging by WP Time Capsule wp-time-capsule allows SQL Injection.This issue affects Backup and Staging by WP Time Capsule: from n/a through \u003c= 1.22.21.","status":"published","published":"2024-10-11T18:15:01Z","modified":"2026-04-28T16:10:21Z","cvss":[{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L","level":"high"}],"updated_at":"2026-11-02T19:05:59.156878Z"}],"ghsa":[{"id":"GHSA-m5xc-rf64-37r2","title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Revmakx Backup and Staging by WP Time Capsule allows SQL Injection.This issue affects Backup and Staging by WP Time Capsule: from n/a through 1.22.21.","status":"published","published":"2024-10-11T21:31:34Z","modified":"2026-04-01T18:33:09Z","cvss":[{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L","level":"high"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T15:07:01.019092Z"}],"nvd":[{"id":"CVE-2024-48020","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in revmakx Backup and Staging by WP Time Capsule wp-time-capsule allows SQL Injection.This issue affects Backup and Staging by WP Time Capsule: from n/a through \u003c= 1.22.21.","status":"published","published":"2024-10-11T19:15:10.22Z","modified":"2026-06-17T07:58:06.747Z","cvss":[{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L","level":"high","assessor":"secondary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:10:31.879321Z"}]}}