CVE-2021-25114: Improper Neutralization of Special Elements used in an SQL Command

The Paid Memberships Pro WordPress plugin before 2.6.7 does not escape the discountcode in one of its REST route available to unauthenticated users before using it in a SQL statement, leading to a SQL injection...