Lucene search
PRIOn knowledge basePRION:CVE-2021-24402HistorySep 20, 2021 - 10:15 a.m.
Sql injection
2021-09-2010:15:00
PRIOn knowledge base
www.prio-n.com
2
0.001 Low
EPSS
Percentile
45.3%
The Orders functionality in the WP iCommerce WordPress plugin through 1.1.1 has an order_id parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection. The feature is available to low privilege users such as contributors
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp_icommerce | le | 1.1.1 |
Related
cve
cve
CVE-2021-24402
2021-09-20 10:15:08
wpvulndb
wpvulndb
WP iCommerce <= 1.1.1 - Authenticated (contributor+) SQL Injection
2021-08-22 00:00:00
wpexploit
wpexploit
WP iCommerce <= 1.1.1 - Authenticated (contributor+) SQL Injection
2021-08-22 00:00:00
patchstack
patchstack
cvelist
cvelist
nvd
nvd
CVE-2021-24402
2021-09-20 10:15:08