2 matches found
CVE-2021-24399
The checkorder function of The Sorter WordPress plugin through 1.0 uses an areaid parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...
7.2CVSS7.2AI score0.01516EPSS
SaveExploits2References1
CVE-2021-24399 The Sorter <= 1.0 - Authenticated SQL Injection
The checkorder function of The Sorter WordPress plugin through 1.0 uses an areaid parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...
7.6AI score0.01516EPSS
SaveExploits2References2
20