CVE-2021-24755 myCred < 2.3 - Subscriber+ SQL Injection

The myCred WordPress plugin before 2.3 does not validate or escape the fields parameter before using it in a SQL statement, leading to an SQL injection exploitable by any authenticated user...

CVE-2021-24755

CVE-2021-24755 affects the WordPress myCred plugin prior to 2.3. The issue is an SQL injection caused by not validating/escaping the fields parameter before use in a SQL statement, allowing an authenticated user to inject SQL via fields. Impact is substantial with CVSS3.1 base score 8.8 (HIGH) an...

VulnCheck KEV: CVE-2021-24755

The myCred WordPress plugin before 2.3 does not validate or escape the fields parameter before using it in a SQL statement, leading to an SQL injection exploitable by any authenticated user...