CVE-2021-24395: Improper Neutralization of Special Elements used in an SQL Command

The editid GET parameter of the Embed Youtube Video WordPress plugin through 1.0 is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...

CVE-2021-24392: Improper Neutralization of Special Elements used in an SQL Command

An id GET parameter of the WordPress Membership SwiftCloud.io WordPress plugin through 1.0 is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...

CVE-2021-24391: Improper Neutralization of Special Elements used in an SQL Command

An editid GET parameter of the Cashtomer WordPress plugin through 1.0.0 is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...

CVE-2021-24390: Improper Neutralization of Special Elements used in an SQL Command

A proid GET parameter of the WordPress支付宝Alipay|财付通Tenpay|贝宝PayPal集成插件 WordPress plugin through 3.7.2 is not sanitised, properly escaped or validated before inserting to a SQL statement not delimited by quotes, leading to SQL injection...

CVE-2021-24303: Improper Neutralization of Special Elements used in an SQL Command

The JiangQie Official Website Mini Program WordPress plugin before 1.1.1 does not escape or validate the id GET parameter before using it in SQL statements, leading to SQL injection issues...

PT-2021-15927

Name of the Vulnerable Software and Affected Versions Easy Testimonial Manager WordPress plugin versions 1.2.0 and earlier Description The issue is related to the id GET parameter in the Easy Testimonial Manager WordPress plugin, which is not properly sanitized, escaped, or validated before being...

CVE-2021-24394: Improper Neutralization of Special Elements used in an SQL Command

An id GET parameter of the Easy Testimonial Manager WordPress plugin through 1.2.0 is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...

WMS SQL Injection Vulnerability

WMS is a warehouse management software. v1.0 version of WMS has a SQL injection vulnerability, the vulnerability is derived from the GET parameter "id" is passed without filtering, an attacker can use the vulnerability to obtain sensitive database information...

CVE-2020-18106

The GET parameter "id" in WMS v1.0 is passed without filtering, which allows attackers to perform SQL injection...

Sql injection

The GET parameter "id" in WMS v1.0 is passed without filtering, which allows attackers to perform SQL injection...

CVE-2020-18106

The GET parameter "id" in WMS v1.0 is passed without filtering, which allows attackers to perform SQL injection...

CVE-2020-18106: Improper Neutralization of Special Elements used in an SQL Command

The GET parameter "id" in WMS v1.0 is passed without filtering, which allows attackers to perform SQL injection...

CVE-2021-24558

The pspinduplicatepostsaveasnewpost function of the Project Status WordPress plugin through 1.6 does not sanitise, validate or escape the post GET parameter passed to it before outputting it in an error message when the related post does not exist, leading to a reflected XSS issue...

PT-2021-16078

Name of the Vulnerable Software and Affected Versions Project Status WordPress plugin versions 1.6 and earlier Description The issue arises from the pspin duplicate post save as new post function not sanitizing, validating, or escaping the post GET parameter before outputting it in an error messa...

PT-2021-16074

Name of the Vulnerable Software and Affected Versions Paytm – Donation Plugin WordPress plugin versions 1.3.2 and earlier Description The issue arises from the plugin's failure to sanitise, validate, or escape the id GET parameter before using it in a SQL statement when deleting donations, leadin...

CVE-2021-24558: Improper Neutralization of Input During Web Page Generation

The pspinduplicatepostsaveasnewpost function of the Project Status WordPress plugin through 1.6 does not sanitise, validate or escape the post GET parameter passed to it before outputting it in an error message when the related post does not exist, leading to a reflected XSS issue...

CVE-2021-24554: Improper Neutralization of Special Elements used in an SQL Command

The Paytm – Donation Plugin WordPress plugin through 1.3.2 does not sanitise, validate or escape the id GET parameter before using it in a SQL statement when deleting donations, leading to an authenticated SQL injection issue...

CVE-2021-24553: Improper Neutralization of Special Elements used in an SQL Command

The Timeline Calendar WordPress plugin through 1.2 does not sanitise, validate or escape the edit GET parameter before using it in a SQL statement when editing events, leading to an authenticated SQL injection issue. Other SQL Injections are also present in the plugin...

CVE-2021-24551: Improper Neutralization of Special Elements used in an SQL Command

The Edit Comments WordPress plugin through 0.3 does not sanitise, validate or escape the jaleditcomments GET parameter before using it in a SQL statement, leading to a SQL injection issue...

CVE-2021-24550: Improper Neutralization of Special Elements used in an SQL Command

The Broken Link Manager WordPress plugin through 0.6.5 does not sanitise, validate or escape the url GET parameter before using it in a SQL statement when retrieving an URL to edit, leading to an authenticated SQL injection issue...