{"id":3023,"date":"2024-02-27T20:46:43","date_gmt":"2024-02-27T20:46:43","guid":{"rendered":"http:\/\/127.0.0.1\/conversios-6-9-1-inyeccion-de-sql-autenticada-suscriptor-a-traves-de-ee_syncproductcategory\/"},"modified":"2024-02-27T20:46:43","modified_gmt":"2024-02-27T20:46:43","slug":"conversios-6-9-1-inyeccion-de-sql-autenticada-suscriptor-a-traves-de-ee_syncproductcategory","status":"publish","type":"post","link":"http:\/\/127.0.0.1\/conversios-6-9-1-inyeccion-de-sql-autenticada-suscriptor-a-traves-de-ee_syncproductcategory\/","title":{"rendered":"Conversios <= 6.9.1 – Inyecci\u00f3n de SQL autenticada (Suscriptor+) a trav\u00e9s de ee_syncProductCategory"},"content":{"rendered":"
<\/p>\n
La vulnerabilidad CVE-2024-0786 permite a atacantes autenticados realizar inyecci\u00f3n de SQL en el plugin Conversios – Google Analytics 4 (GA4), Meta Pixel & more Via Google Tag Manager For WooCommerce para WordPress. Esta vulnerabilidad afecta a todas las versiones hasta la 6.9.1 y puede ser explotada por usuarios con acceso de suscriptor o superior para […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[736],"class_list":["post-3023","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cve-2024-0786"],"yoast_head":"\n