CVE-2021-39351

The CVE-2021-39351 entry concerns the WordPress plugin WP Bannerize, specifically versions 2.0.0 through 4.0.2. The vulnerability is an authenticated SQL injection via the id parameter in the ~/Classes/wpBannerizeAdmin.php file, enabling an attacker with valid credentials to exfiltrate sensitive ...