2 matches found
CVE-2021-24866
The WP Data Access WordPress plugin before 5.0.0 does not properly sanitise and escape the backupdate parameter before using it a SQL statement, leading to a SQL injection issue and could allow arbitrary table deletion...
9.8CVSS0.01575EPSS
SaveExploits2References1
Sql injection
The WP Data Access WordPress plugin before 5.0.0 does not properly sanitise and escape the backupdate parameter before using it a SQL statement, leading to a SQL injection issue and could allow arbitrary table deletion...
7.5CVSS9.6AI score0.01575EPSS
SaveExploits2References1Affected Software1
20