PT-2021-15873

Name of the Vulnerable Software and Affected Versions Video Embed WordPress plugin versions 1.0 and earlier Description The issue concerns the id GET parameter in one of the Video Embed WordPress plugin's pages, which is accessible via forced browsing. This parameter is not sanitized, validated, ...

CVE-2021-24337: Improper Neutralization of Special Elements used in an SQL Command

The id GET parameter of one of the Video Embed WordPress plugin through 1.0's page available via forced browsing is not sanitised, validated or escaped before being used in a SQL statement, allowing low privilege users, such as subscribers, to perform SQL injection...