PT-2021-15928

Name of the Vulnerable Software and Affected Versions Embed Youtube Video WordPress plugin versions 1.0 and earlier Description The issue arises from the editid GET parameter not being sanitized, escaped, or validated before being inserted into a SQL statement, leading to SQL injection...

CVE-2021-24395: Improper Neutralization of Special Elements used in an SQL Command

The editid GET parameter of the Embed Youtube Video WordPress plugin through 1.0 is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...