CVE-2021-24402

The CVE-2021-24402 refers to the WordPress WP iCommerce plugin (versions up to 1.1.1). The Orders feature exposes an order_id parameter that is not sanitised, escaped or validated before being inserted into an SQL statement, enabling SQL injection. The vulnerability requires at least authenticate...