CVE-2021-24520

Stock in & out <= 1.0.4 - Authenticated SQL Injection

The Stock in & out WordPress plugin through 1.0.4 lacks proper sanitization before passing variables to an SQL request, making it vulnerable to SQL Injection attacks. Users with a role of contributor or higher can exploit this vulnerability.

CVSS 3.1 · 8.8 High EPSS 1.6% KEV · Not listed

Vendors

Coderstimes

Products

Out Of Stock Message For Woocommerce

CVE-2021-24511

Create WooCommerce Product Feeds For 40+ Merchants < 3.3.1.0 - Authenticated SQL Injection

The fetch_product_ajax functionality in the Product Feed on WooCommerce WordPress plugin before 3.3.1.0 uses a `product_id` POST parameter which is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.

CVSS 3.1 · 7.2 High EPSS 1.5% KEV · Not listed

Vendors

Dpl

Products

Product Feed On Woocommerce

CVE-2021-24507

Astra Pro Addon < 3.5.2 - Unauthenticated SQL Injection

The Astra Pro Addon WordPress plugin before 3.5.2 did not properly sanitise or escape some of the POST parameters from the astra_pagination_infinite and astra_shop_pagination_infinite AJAX action (available to both unauthenticated and authenticated user) before using them in SQL statement, leading to an SQL Injection issues

CVSS 3.1 · 9.8 Critical EPSS 11.0% KEV · Not listed

Vendors

Brainstormforce

Products

Astra

CVE-2021-24506

Slider Hero < 8.2.7 - Contributor+ SQL Injection

The Slider Hero with Animation, Video Background & Intro Maker WordPress plugin before 8.2.7 does not sanitise or escape the id attribute of its hero-button shortcode before using it in a SQL statement, allowing users with a role as low as Contributor to perform SQL injection.

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed

Vendors

Quantumcloud

Products

Slider Hero

CVE-2021-24497

Giveaway <= 1.2.2 - Authenticated SQL Injection

The Giveaway WordPress plugin through 1.2.2 is vulnerable to an SQL Injection issue which allows an administrative user to execute arbitrary SQL commands via the $post_id on the options.php page.

CVSS 3.1 · 7.2 High EPSS 1.3% KEV · Not listed

Vendors

Satollo

Products

Giveaway

CVE-2021-24492

Handsome Testimonials & Reviews < 2.1.1 - Authenticated (Subscriber+) SQL Injection

The hndtst_action_instance_callback AJAX call of the Handsome Testimonials & Reviews WordPress plugin before 2.1.1, available to any authenticated users, does not sanitise, validate or escape the hndtst_previewShortcodeInstanceId POST parameter before using it in a SQL statement, leading to an SQL Injection issue.

CVSS 3.1 · 8.8 High EPSS 1.6% KEV · Not listed

Vendors

Handsome Testimonials \& Reviews Project

Products

Handsome Testimonials \& Reviews

CVE-2021-24484

Secure Copy Content Protection and Content Locking < 2.6.7 - Authenticated Blind SQL Injections

The get_reports() function in the Secure Copy Content Protection and Content Locking WordPress plugin before 2.6.7 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard

CVSS 3.1 · 7.2 High EPSS 1.3% KEV · Not listed

Vendors

Ays-pro

Products

Secure Copy Content Protection And Content Locking

CVE-2021-24483

Poll Maker < 3.2.1 - Authenticated Blind SQL Injections

The get_poll_categories(), get_polls() and get_reports() functions in the Poll Maker WordPress plugin before 3.2.1 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard

CVSS 3.1 · 7.2 High EPSS 1.4% KEV · Not listed

Vendors

Ays-pro

Products

Poll Maker

CVE-2021-24465

Meow Gallery < 4.1.9 - Contributor+ SQL Injection

The Meow Gallery WordPress plugin before 4.1.9 does not sanitise, validate or escape the ids attribute of its gallery shortcode (available for users as low as Contributor) before using it in an SQL statement, leading to an authenticated SQL Injection issue. The injection also allows the returned values to be manipulated in a way that could lead to data disclosure and arbitrary objects to be deserialized.

CVSS 3.1 · 8.1 High EPSS 1.2% KEV · Not listed

Vendors

Meowapps

Products

Meow Gallery

CVE-2021-24463

Image Slider by Ays - Responsive Slider and Carousel < 2.5.0 - Authenticated Blind SQL Injection

The get_sliders() function in the Image Slider by Ays- Responsive Slider and Carousel WordPress plugin before 2.5.0 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed

Vendors

Ays-pro

Products

Image Slider

CVE-2021-24462

Photo Gallery by Ays - Responsive Image Gallery < 4.4.4 - Authenticated Blind SQL Injections

The get_gallery_categories() and get_galleries() functions in the Photo Gallery by Ays – Responsive Image Gallery WordPress plugin before 4.4.4 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed

Vendors

Ays-pro

Products

Photo Gallery

CVE-2021-24461

FAQ Builder < 1.3.6 - Authenticated Blind SQL Injections

The get_faqs() function in the FAQ Builder AYS WordPress plugin before 1.3.6 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed

Vendors

Ays-pro

Products

Faq Builder

CVE-2021-24460

Popup Like box - Page Plugin < 3.5.3 - Authenticated Blind SQL Injections

The get_fb_likeboxes() function in the Popup Like box – Page Plugin WordPress plugin before 3.5.3 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed

Vendors

Ays-pro

Products

Popup Box

CVE-2021-24459

Survey Maker < 1.5.6 - Authenticated Blind SQL Injections

The get_results() and get_items() functions in the Survey Maker WordPress plugin before 1.5.6 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed

Vendors

Ays-pro

Products

Survey Maker

CVE-2021-24458

Popup box < 2.3.4 - Authenticated Blind SQL Injections

The get_ays_popupboxes() and get_popup_categories() functions of the Popup box WordPress plugin before 2.3.4 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed

Vendors

Ays-pro

Products

Popup Box

CVE-2021-24457

Portfolio Responsive Gallery < 1.1.8 - Authenticated Blind SQL Injections

The get_portfolios() and get_portfolio_attributes() functions in the class-portfolio-responsive-gallery-list-table.php and class-portfolio-responsive-gallery-attributes-list-table.php files of the Portfolio Responsive Gallery WordPress plugin before 1.1.8 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed

Vendors

Ays-pro

Products

Portfolio Responsive Gallery

CVE-2021-24456

Quiz Maker < 6.2.0.9 - Multiple Authenticated Blind SQL Injections

The Quiz Maker WordPress plugin before 6.2.0.9 did not properly sanitise and escape the order and orderby parameters before using them in SQL statements, leading to SQL injection issues in the admin dashboard

CVSS 3.1 · 7.2 High EPSS 1.3% KEV · Not listed

Vendors

Ays-pro

Products

Quiz Maker

CVE-2021-24451

Export Users With Meta < 0.6.5 - Authenticated SQL Injection

The Export Users With Meta WordPress plugin before 0.6.5 did not escape the list of roles to export before using them in a SQL statement in the export functionality, available to admins, leading to an authenticated SQL Injection.

CVSS 3.1 · 7.2 High EPSS 1.4% KEV · Not listed

Vendors

Export Users With Meta Project

Products

Export Users With Meta

CVE-2021-24442

Poll, Survey, Questionnaire and Voting system < 1.5.3 - Unauthenticated Blind SQL Injection

The Poll, Survey, Questionnaire and Voting system WordPress plugin before 1.5.3 did not sanitise, escape or validate the date_answers[] POST parameter before using it in a SQL statement when sending a Poll result, allowing unauthenticated users to perform SQL Injection attacks

CVSS 3.1 · 9.8 Critical EPSS 46.0% KEV · Not listed

Vendors

Wpdevart

Products

Poll\, Survey\, Questionnaire And Voting System

CVE-2021-24404

WP-Board <= 1.1 (beta) - Unauthenticated SQL Injection

The options.php file of the WP-Board WordPress plugin through 1.1 beta accepts a postid parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection. This is a time based SQLI and in the same function vulnerable parameter is passed twice so if we pass time as 5 seconds it takes 10 seconds to return since the query ran twice.

CVSS 3.1 · 8.8 High EPSS 4.7% KEV · Not listed

Vendors

Wp-board Project

Products

Wp-board