CVE-2021-24666

The Podlove Podcast Publisher WordPress plugin before 3.5.6 contains a 'Social & Donations' module not activated by default, which adds the rest route '/services/contributor/?P\d+, takes an 'id' and 'category' parameters as arguments. Both parameters can be used for the SQLi...

CVE-2021-24666

The Podlove Podcast Publisher WordPress plugin before 3.5.6 contains a 'Social & Donations' module not activated by default, which adds the rest route '/services/contributor/?P\d+, takes an 'id' and 'category' parameters as arguments. Both parameters can be used for the SQLi...

CVE-2021-24666

The Podlove Podcast Publisher WordPress plugin (versions before 3.5.6 ) is vulnerable to SQL injection due to a flaw in the "Social & Donations" module. This module, which is not active by default, introduces a REST route /services/contributor/(?P[\d]+) that accepts id and category parameters. Im...