Lucene search
+L

5 matches found

NVD
NVD
added 2021/09/20 10:15 a.m.15 views

CVE-2021-24400

The Edit Role functionality in the Display Users WordPress plugin through 2.0.0 had an id parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...

7.2CVSS0.01516EPSS
SaveExploits2References2
OSV
OSV
added 2021/09/20 10:15 a.m.5 views

CVE-2021-24400

The Edit Role functionality in the Display Users WordPress plugin through 2.0.0 had an id parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...

7.2CVSS5.9AI score0.01516EPSS
SaveExploits2References2
ATTACKERKB
ATTACKERKB
added 2021/09/20 10:15 a.m.3 views

CVE-2021-24400

The Edit Role functionality in the Display Users WordPress plugin through 2.0.0 had an id parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...

7.2CVSS7AI score0.01516EPSS
SaveExploits2References3
Cvelist
Cvelist
added 2021/09/20 10:6 a.m.25 views

CVE-2021-24400 Display users <= 2.0.0 - Authenticated SQL Injection

The Edit Role functionality in the Display Users WordPress plugin through 2.0.0 had an id parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...

7.5AI score0.01516EPSS
SaveExploits2References2
CVE
CVE
added 2021/09/20 10:6 a.m.40 views

CVE-2021-24400

The CVE-2021-24400 entry refers to a SQL injection in the Display Users WordPress plugin (≤ 2.0.0) due to an unsanitised id parameter in the Edit Role function, which is inserted into SQL statements. Affected component: WordPress Display Users plugin, version up to 2.0.0; root cause: lack of sani...

7.2CVSS7.2AI score0.01516EPSS
SaveExploits2References2Affected Software1
Rows per page
Query Builder