Lucene search
+L

3 matches found

NVD
NVD
•added 2021/12/06 4:15 p.m.•29 views

CVE-2021-24866

The WP Data Access WordPress plugin before 5.0.0 does not properly sanitise and escape the backupdate parameter before using it a SQL statement, leading to a SQL injection issue and could allow arbitrary table deletion...

9.8CVSS0.01575EPSS
SaveExploits2References1
Prion
Prion
•added 2021/12/06 4:15 p.m.•19 views

Sql injection

The WP Data Access WordPress plugin before 5.0.0 does not properly sanitise and escape the backupdate parameter before using it a SQL statement, leading to a SQL injection issue and could allow arbitrary table deletion...

7.5CVSS9.6AI score0.01575EPSS
SaveExploits2References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/06 12:00 a.m.•4 views

CVE-2021-24866: Improper Neutralization of Special Elements used in an SQL Command

The WP Data Access WordPress plugin before 5.0.0 does not properly sanitise and escape the backupdate parameter before using it a SQL statement, leading to a SQL injection issue and could allow arbitrary table deletion...

9.8CVSS6AI score0.01575EPSS
SaveExploits2References2
Rows per page
Query Builder