Lucene search
PRIOn knowledge basePRION:CVE-2021-24877HistoryNov 23, 2021 - 8:15 p.m.
Sql injection
2021-11-2320:15:00
PRIOn knowledge base
www.prio-n.com
3
0.001 Low
EPSS
Percentile
37.8%
The MainWP Child WordPress plugin before 4.1.8 does not validate the orderby and order parameter before using them in a SQL statement, leading to an SQL injection exploitable by high privilege users such as admin when the Backup and Staging by WP Time Capsule plugin is installed
| CPE | Name | Operator | Version |
|---|---|---|---|
| mainwp_child | lt | 4.1.8 |
Related
wpvulndb
wpvulndb
MainWP Child < 4.1.8 - Admin+ SQL Injection
2021-10-25 00:00:00
patchstack
patchstack
cvelist
cvelist
CVE-2021-24877 MainWP Child < 4.1.8 - Admin+ SQL Injection
2021-11-23 19:16:17
cve
cve
CVE-2021-24877
2021-11-23 20:15:10
nvd
nvd
CVE-2021-24877
2021-11-23 20:15:10
openvas
openvas
WordPress MainWP Child Plugin < 4.1.8 SQLi Vulnerability
2021-12-06 00:00:00
wpexploit
wpexploit
MainWP Child < 4.1.8 - Admin+ SQL Injection
2021-10-25 00:00:00