49 matches found
CVE-2021-24959
CVE-2021-24959 Description The WP Email Users WordPress plugin through 1.7.6 does not escape the dataraw parameter in the weuselectedusers1 AJAX action, available to any authenticated users, allowing them to perform SQL injection attacks. root@kitploit: CVE CVE-2021-24959 CVSS 8.8 High Publicly...
8.8CVSS7.9AI score0.02249EPSS
SaveExploits3
20