Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 9:03 p.m.•17 views

CVE-2021-24629

The Post Content XMLRPC WordPress plugin through 1.0 does not sanitise or escape multiple GET/POST parameters before using them in SQL statements in the admin dashboard, leading to an authenticated SQL Injections...

7.2CVSS7.4AI score0.01546EPSS
SaveExploits2References1
attackerkb
attackerkb
•added 2021/11/08 6:15 p.m.•8 views

CVE-2021-24629

The Post Content XMLRPC WordPress plugin through 1.0 does not sanitise or escape multiple GET/POST parameters before using them in SQL statements in the admin dashboard, leading to an authenticated SQL Injections...

7.2CVSS7.1AI score0.01546EPSS
SaveExploits2References3
Cvelist
Cvelist
•added 2021/11/08 5:34 p.m.•43 views

CVE-2021-24629 Post Content XMLRPC <= 1.0 - Admin+ SQL Injections

The Post Content XMLRPC WordPress plugin through 1.0 does not sanitise or escape multiple GET/POST parameters before using them in SQL statements in the admin dashboard, leading to an authenticated SQL Injections...

7.3AI score0.01546EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2021/11/08 12:00 a.m.•18 views

WordPress SQL注入漏洞

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress Post Content XMLRPC plugin, which stems from the plugin'...

7.2CVSS6.2AI score0.01546EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/08 12:00 a.m.•8 views

CVE-2021-24629: Improper Neutralization of Special Elements used in an SQL Command

The Post Content XMLRPC WordPress plugin through 1.0 does not sanitise or escape multiple GET/POST parameters before using them in SQL statements in the admin dashboard, leading to an authenticated SQL Injections...

7.2CVSS5.8AI score0.01546EPSS
SaveExploits2References2
Rows per page
Query Builder