PT-2021-16029

Name of the Vulnerable Software and Affected Versions Astra Pro Addon WordPress plugin versions prior to 3.5.2 Description The issue arises from the improper sanitization or escaping of certain POST parameters from the astra pagination infinite and astra shop pagination infinite AJAX actions, whi...

CVE-2021-24507: Improper Neutralization of Special Elements used in an SQL Command

The Astra Pro Addon WordPress plugin before 3.5.2 did not properly sanitise or escape some of the POST parameters from the astrapaginationinfinite and astrashoppaginationinfinite AJAX action available to both unauthenticated and authenticated user before using them in SQL statement, leading to an...