Lucene search
JrXnmWPEX-ID:E3B9EE9F-602D-4E9D-810C-E1E3BA604464HistoryOct 13, 2021 - 12:00 a.m.
WP Cloudy < 4.4.9 - Admin+ SQL Injection
2021-10-1300:00:00
JrXnm
57
0.001 Low
EPSS
Percentile
42.8%
The plugin does not escape the post_id parameter before using it in a SQL statement in the admin dashboard, leading to a SQL Injection issue
The first digits of the post parameter must be a valid Post ID (Weather post or not)
https://example.com/wp-admin/admin.php?action=wpc_duplicate_post_as_draft&post=1%20and%20sleep(10)%23Related
cnvd
cnvd
WordPress WP Cloudy plugin SQL injection vulnerability
2022-03-02 00:00:00
prion
prion
Sql injection
2022-02-28 09:15:00
cvelist
cvelist
CVE-2021-24864 WP Cloudy < 4.4.9 - Admin+ SQL Injection
2022-02-28 09:06:13
cve
cve
CVE-2021-24864
2022-02-28 09:15:07
patchstack
patchstack
WordPress WP Cloudy plugin <= 4.4.8 - SQL Injection (SQLi) vulnerability
2022-01-26 00:00:00
nvd
nvd
CVE-2021-24864
2022-02-28 09:15:07
wpvulndb
wpvulndb
WP Cloudy < 4.4.9 - Admin+ SQL Injection
2021-10-13 00:00:00