CVE-2021-24772: Improper Neutralization of Special Elements used in an SQL Command

The Stream WordPress plugin before 3.8.2 does not sanitise and validate the order GET parameter from the Stream Records admin dashboard before using it in a SQL statement, leading to an SQL injection issue...