{"id":"CVE-2024-54261","aliases":["EUVD-2024-52387","GHSA-37gx-37xg-963j"],"status":"published","title":"WordPress TAX SERVICE Electronic HDM plugin \u003c= 1.2.2 - SQL Injection vulnerability","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in HK Digital Agency LLC TAX SERVICE Electronic HDM virtual-hdm-for-taxservice-am allows SQL Injection.This issue affects TAX SERVICE Electronic HDM: from n/a through \u003c= 1.2.2.","severity":{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00658,"percentile":0.51761,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2024-12-13T14:24:41Z","modified":"2026-06-17T08:10:01Z","products":[{"vendor":"hk digital agency llc","product":"tax service electronic hdm"},{"vendor":"unknown","product":"tax service electronic hdm"}],"references":[{"url":"https://patchstack.com/database/Wordpress/Plugin/virtual-hdm-for-taxservice-am/vulnerability/wordpress-tax-service-electronic-hdm-plugin-1-1-2-sql-injection-vulnerability?_s_id=cve","tags":["vdb-entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-54261"},{"url":"https://patchstack.com/database/wordpress/plugin/virtual-hdm-for-taxservice-am/vulnerability/wordpress-tax-service-electronic-hdm-plugin-1-1-2-sql-injection-vulnerability?_s_id=cve"},{"url":"https://github.com/advisories/GHSA-37gx-37xg-963j"}],"sources":{"cve":[{"id":"CVE-2024-54261","title":"WordPress TAX SERVICE Electronic HDM plugin \u003c= 1.2.2 - SQL Injection vulnerability","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in HK Digital Agency LLC TAX SERVICE Electronic HDM virtual-hdm-for-taxservice-am allows SQL Injection.This issue affects TAX SERVICE Electronic HDM: from n/a through \u003c= 1.2.2.","status":"published","published":"2024-12-13T14:24:41.976Z","modified":"2026-04-28T16:10:48.463Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:33:59.177173Z"}],"euvd":[{"id":"EUVD-2024-52387","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in HK Digital Agency LLC TAX SERVICE Electronic HDM virtual-hdm-for-taxservice-am allows SQL Injection.This issue affects TAX SERVICE Electronic HDM: from n/a through \u003c= 1.2.2.","status":"published","published":"2024-12-13T14:24:41Z","modified":"2026-04-28T16:10:48Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T19:05:55.800983Z"}],"ghsa":[{"id":"GHSA-37gx-37xg-963j","title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in HK Digital Agency LLC TAX SERVICE Electronic HDM allows SQL Injection.This issue affects TAX SERVICE Electronic HDM: from n/a through 1.1.2.","status":"published","published":"2024-12-13T15:30:43Z","modified":"2024-12-13T15:30:54Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:59:10.885275Z"}],"nvd":[{"id":"CVE-2024-54261","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in HK Digital Agency LLC TAX SERVICE Electronic HDM virtual-hdm-for-taxservice-am allows SQL Injection.This issue affects TAX SERVICE Electronic HDM: from n/a through \u003c= 1.2.2.","status":"published","published":"2024-12-13T15:15:30.21Z","modified":"2026-06-17T08:10:01.033Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:10:40.137849Z"}]}}