3 matches found
CVE-2021-24497
The Giveaway WordPress plugin through 1.2.2 is vulnerable to an SQL Injection issue which allows an administrative user to execute arbitrary SQL commands via the $postid on the options.php page...
7.2CVSS8.5AI score0.01344EPSS
SaveExploits2References1
CVE-2021-24497
The Giveaway WordPress plugin through 1.2.2 is vulnerable to an SQL Injection issue which allows an administrative user to execute arbitrary SQL commands via the $postid on the options.php page...
7.2CVSS7.4AI score0.01344EPSS
SaveExploits2References2
CVE-2021-24497 Giveaway <= 1.2.2 - Authenticated SQL Injection
The Giveaway WordPress plugin through 1.2.2 is vulnerable to an SQL Injection issue which allows an administrative user to execute arbitrary SQL commands via the $postid on the options.php page...
7.9AI score0.01344EPSS
SaveExploits2References1
20