CVE-2021-24755 myCred < 2.3 - Subscriber+ SQL Injection

The myCred WordPress plugin before 2.3 does not validate or escape the fields parameter before using it in a SQL statement, leading to an SQL injection exploitable by any authenticated user...

CVE-2021-24755

The myCred WordPress plugin version before 2.3 is vulnerable to an SQL injection vulnerability. The root cause is a failure to properly validate or escape the fields parameter before incorporating it into a SQL statement. This flaw allows any authenticated user to execute unauthorized SQL command...

VulnCheck KEV: CVE-2021-24755

The myCred WordPress plugin before 2.3 does not validate or escape the fields parameter before using it in a SQL statement, leading to an SQL injection exploitable by any authenticated user...