CVE-2021-24666

The Podlove Podcast Publisher WordPress plugin before 3.5.6 contains a 'Social & Donations' module not activated by default, which adds the rest route '/services/contributor/?P\d+, takes an 'id' and 'category' parameters as arguments. Both parameters can be used for the SQLi...

CVE-2021-24666

The Podlove Podcast Publisher WordPress plugin up to version 3.5.6 contains a not-activated Social & Donations module that adds the REST route /services/contributor/(?P[\d]+) accepting id and category parameters. These parameters are vulnerable to SQL injection, potentially allowing an attacker t...