CVE-2021-24866

The CVE-2021-24866 entry concerns the WordPress WP Data Access plugin prior to version 5.0.0, where the backup_date parameter is not properly sanitised/escaped before being used in a SQL statement. This causes a SQL injection vulnerability with the potential to delete arbitrary tables as describe...

CVE-2021-24866: Improper Neutralization of Special Elements used in an SQL Command

The WP Data Access WordPress plugin before 5.0.0 does not properly sanitise and escape the backupdate parameter before using it a SQL statement, leading to a SQL injection issue and could allow arbitrary table deletion...

PT-2021-16344

Name of the Vulnerable Software and Affected Versions: WP Data Access WordPress plugin versions prior to 5.0.0 Description: The issue arises from the improper sanitization and escaping of the backup date parameter, which is used in a SQL statement. This leads to a SQL injection issue, potentially...