WordPress WP Data Access Plugin SQL Injection (CVE-2021-24866)

An SQL injection vulnerability exists in WordPress WP Data Access plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2021-24866

The WP Data Access WordPress plugin before 5.0.0 does not properly sanitise and escape the backupdate parameter before using it a SQL statement, leading to a SQL injection issue and could allow arbitrary table deletion...

CVE-2021-24866

The CVE-2021-24866 entry concerns the WordPress WP Data Access plugin prior to version 5.0.0, where the backup_date parameter is not properly sanitised/escaped before being used in a SQL statement. This causes a SQL injection vulnerability with the potential to delete arbitrary tables as describe...

CVE-2021-24866 WP Data Access < 5.0.0 - Admin+ SQL Injection

The WP Data Access WordPress plugin before 5.0.0 does not properly sanitise and escape the backupdate parameter before using it a SQL statement, leading to a SQL injection issue and could allow arbitrary table deletion...