CVE-2021-24497

The Giveaway WordPress plugin through 1.2.2 is vulnerable to an SQL Injection issue which allows an administrative user to execute arbitrary SQL commands via the $postid on the options.php page...

CVE-2021-24497: Improper Neutralization of Special Elements used in an SQL Command

The Giveaway WordPress plugin through 1.2.2 is vulnerable to an SQL Injection issue which allows an administrative user to execute arbitrary SQL commands via the $postid on the options.php page...

PT-2021-16020

Name of the Vulnerable Software and Affected Versions Giveaway WordPress plugin versions 1.2.2 and earlier Description The issue allows an administrative user to execute arbitrary SQL commands via the $post id on the "options.php" page. This is an SQL Injection issue. Recommendations For Giveaway...