TI-2024-35145 CVE-2024-52474 · GHSA-h36x-mcc8-r3vxWordPress Express Payments plugin <= 1.1.8 - SQL Injection vulnerabilityPriority MEDIUM 47Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Сервис “Экспресс Платежи” Express Payments Module express-pay allows Blind SQL Injection.This issue affects Express Pa…CVSS 3.1CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00539 · Published 2024-11-28 · No fix listed CWE-89