Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 6:24 p.m.•15 views

CVE-2021-24400

The Edit Role functionality in the Display Users WordPress plugin through 2.0.0 had an id parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...

7.2CVSS7.2AI score0.01516EPSS
SaveExploits2References1
OSV
OSV
•added 2021/09/20 10:15 a.m.•15 views

CVE-2021-24400

The Edit Role functionality in the Display Users WordPress plugin through 2.0.0 had an id parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...

7.2CVSS5.9AI score0.01516EPSS
SaveExploits2References2
attackerkb
attackerkb
•added 2021/09/20 10:15 a.m.•9 views

CVE-2021-24400

The Edit Role functionality in the Display Users WordPress plugin through 2.0.0 had an id parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...

7.2CVSS7AI score0.01516EPSS
SaveExploits2References3
CVE
CVE
•added 2021/09/20 10:06 a.m.•56 views

CVE-2021-24400

The CVE-2021-24400 entry refers to a SQL injection in the Display Users WordPress plugin (≤ 2.0.0) due to an unsanitised id parameter in the Edit Role function, which is inserted into SQL statements. Affected component: WordPress Display Users plugin, version up to 2.0.0; root cause: lack of sani...

7.2CVSS7.2AI score0.01516EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
•added 2021/09/20 10:06 a.m.•41 views

CVE-2021-24400 Display users <= 2.0.0 - Authenticated SQL Injection

The Edit Role functionality in the Display Users WordPress plugin through 2.0.0 had an id parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...

7.5AI score0.01516EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/20 12:00 a.m.•7 views

CVE-2021-24400: Improper Neutralization of Special Elements used in an SQL Command

The Edit Role functionality in the Display Users WordPress plugin through 2.0.0 had an id parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...

7.2CVSS5.9AI score0.01516EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2021/09/20 12:00 a.m.•6 views

PT-2021-15933

Name of the Vulnerable Software and Affected Versions Display Users WordPress plugin versions prior to 2.0.1 Description The issue concerns the Edit Role functionality in the Display Users WordPress plugin. It has an id parameter that is not properly sanitized, escaped, or validated before being...

7.2CVSS0.01516EPSS
SaveExploits2References4
Patchstack
Patchstack
•added 2021/08/22 12:00 a.m.•30 views

WordPress Display Users plugin <= 2.0.0 - Authenticated SQL Injection (SQLi) vulnerability

Authenticated SQL Injection SQLi vulnerability discovered by Syed Sheeraz Ali in WordPress Display Users plugin versions = 2.0.0. Solution This plugin has been closed as of May 13, 2021 and is not available for download. Reason: Security Issue...

7.2CVSS2.9AI score0.01516EPSS
SaveExploits2References3Affected Software1
Rows per page
Query Builder