CVE-2021-24827

Asgaros Forum < 1.15.13 - Unauthenticated SQL Injection

The Asgaros Forum WordPress plugin before 1.15.13 does not validate and escape user input when subscribing to a topic before using it in a SQL statement, leading to an unauthenticated SQL injection issue

CVSS 3.1 · 9.8 Critical EPSS 12.6% KEV · Not listed

Vendors

Asgaros

Products

Asgaros Forum

CVE-2021-24791

Header Footer Code Manager < 1.1.14 - Admin+ SQL Injections

The Header Footer Code Manager WordPress plugin before 1.1.14 does not validate and escape the "orderby" and "order" request parameters before using them in a SQL statement when viewing the Snippets admin dashboard, leading to SQL injections

CVSS 3.1 · 7.2 High EPSS 5.2% KEV · Not listed

Vendors

Draftpress

Products

Header Footer Code Manager

CVE-2021-24778

Tradetracker-Store < 4.6.60 - Admin+ SQL Injection

The test parameter of the xmlfeed in the Tradetracker-Store WordPress plugin before 4.6.60 is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.

CVSS 3.1 · 7.2 High EPSS 1.3% KEV · Not listed

Vendors

Wpaffiliatefeed

Products

Tradetracker-store

CVE-2021-24777

Hotscot Contact Form < 1.3 - Admin+ SQL Injection

The view submission functionality in the Hotscot Contact Form WordPress plugin before 1.3 makes a get request with the sub_id parameter which not sanitised, escaped or validated before inserting to a SQL statement, leading to an SQL injection.

CVSS 3.1 · 7.2 High EPSS 1.3% KEV · Not listed

Vendors

Hotscot

Products

Contact Form

CVE-2021-24774

Check & Log Email < 1.0.3 - Admin+ SQL Injections

The Check & Log Email WordPress plugin before 1.0.3 does not validate and escape the "order" and "orderby" GET parameters before using them in a SQL statement when viewing logs, leading to SQL injections issues

CVSS 3.1 · 7.2 High EPSS 1.3% KEV · Not listed

Vendors

Wpchill

Products

Check \& Log Email

CVE-2021-24772

Stream < 3.8.2 - Admin+ SQL Injection

The Stream WordPress plugin before 3.8.2 does not sanitise and validate the order GET parameter from the Stream Records admin dashboard before using it in a SQL statement, leading to an SQL injection issue.

CVSS 3.1 · 8.8 High EPSS 1.6% KEV · Not listed

Vendors

Xwp

Products

Stream

CVE-2021-24769

Permalink Manager Lite < 2.2.13.1 - Admin+ SQL Injection

The Permalink Manager Lite WordPress plugin before 2.2.13.1 does not validate and escape the orderby parameter before using it in a SQL statement in the Permalink Manager page, leading to a SQL Injection

CVSS 3.1 · 7.2 High EPSS 1.4% KEV · Not listed

Vendors

Permalink Manager Lite Project

Products

Permalink Manager Lite

CVE-2021-24762

Perfect Survey < 1.5.2 - Unauthenticated SQL Injection

The Perfect Survey WordPress plugin before 1.5.2 does not validate and escape the question_id GET parameter before using it in a SQL statement in the get_question AJAX action, allowing unauthenticated users to perform SQL injection.

CVSS 3.1 · 9.8 Critical EPSS 86.8% KEV · Not listed

Vendors

Getperfectsurvey

Products

Perfect Survey

CVE-2021-24758

Email Log < 2.4.7 - Admin+ SQL Injection

The Email Log WordPress plugin before 2.4.7 does not properly validate, sanitise and escape the "orderby" and "order" GET parameters before using them in SQL statement in the admin dashboard, leading to SQL injections

CVSS 3.1 · 8.8 High EPSS 1.3% KEV · Not listed

Vendors

Email Log Project

Products

Email Log

CVE-2021-24754

MainWP Child Reports < 2.0.8 - Admin+ SQL Injection

The MainWP Child Reports WordPress plugin before 2.0.8 does not validate or sanitise the order parameter before using it in a SQL statement in the admin dashboard, leading to an SQL injection issue

CVSS 3.1 · 7.2 High EPSS 1.4% KEV · Not listed

Vendors

Mainwp

Products

Mainwp Child Reports

CVE-2021-24753

Rich Reviews by Starfish < 1.9.6 - Admin+ SQL Injection

The Rich Reviews by Starfish WordPress plugin before 1.9.6 does not properly validate the orderby GET parameter of the pending reviews page before using it in a SQL statement, leading to an authenticated SQL injection issue

CVSS 3.1 · 7.2 High EPSS 1.5% KEV · Not listed

Vendors

Starfish

Products

Rich Review

CVE-2021-24748

Email Before Download < 6.8 - Admin+ SQL Injection

The Email Before Download WordPress plugin before 6.8 does not properly validate and escape the order and orderby GET parameters before using them in SQL statements, leading to authenticated SQL injection issues

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed

Vendors

Mandsconsulting

Products

Email Before Download

CVE-2021-24747

SEO Booster < 3.8 - Admin+ SQL Injection

The SEO Booster WordPress plugin before 3.8 allows for authenticated SQL injection via the "fn_my_ajaxified_dataloader_ajax" AJAX request as the $_REQUEST['order'][0]['dir'] parameter is not properly escaped leading to blind and error-based SQL injections.

CVSS 3.1 · 7.2 High EPSS 1.5% KEV · Not listed

Vendors

Cleverplugins

Products

Seo Booster

CVE-2021-24741

Support Board < 3.3.4 - Multiple Unauthenticated SQL Injections

The Support Board WordPress plugin before 3.3.4 does not escape multiple POST parameters (such as status_code, department, user_id, conversation_id, conversation_status_code, and recipient_id) before using them in SQL statements, leading to SQL injections which are exploitable by unauthenticated users.

CVSS 3.1 · 9.8 Critical EPSS 5.6% KEV · Not listed

Vendors

Schiocco

Products

Support Board - Chat And Help Desk

CVE-2021-24731

Pie Register < 3.7.1.6 - Unauthenticated SQL Injection

The Registration Forms – User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes WordPress plugin before 3.7.1.6 does not properly escape user data before using it in a SQL statement in the wp-json/pie/v1/login REST API endpoint, leading to an SQL injection.

CVSS 3.1 · 9.8 Critical EPSS 6.4% KEV · Not listed

Vendors

Genetechsolutions

Products

Pie Register

CVE-2021-24728

Paid Member Subscriptions < 2.4.2 - Authenticated SQL Injection

The Membership & Content Restriction – Paid Member Subscriptions WordPress plugin before 2.4.2 did not sanitise, validate or escape its order and orderby parameters before using them in SQL statement, leading to Authenticated SQL Injections in the Members and Payments pages.

CVSS 3.1 · 8.8 High EPSS 1.7% KEV · Not listed

Vendors

Cozmoslabs

Products

Membership \& Content Restriction - Paid Member Subscriptions

CVE-2021-24726

WP Simple Booking Calendar <= 2.0.6 (before 07/12/2021) - Authenticated SQL Injection

The WP Simple Booking Calendar WordPress plugin before 2.0.6 did not escape, validate or sanitise the orderby parameter in its Search Calendars action, before using it in a SQL statement, leading to an authenticated SQL injection issue

CVSS 3.1 · 8.8 High EPSS 1.6% KEV · Not listed

Vendors

Wpsimplebookingcalendar

Products

Wp Simple Booking Calendar

CVE-2021-24704

Orange Form <= 1.0 - SQL Injection via CSRF

In the Orange Form WordPress plugin through 1.0, the process_bulk_action() function in "admin/orange-form-email.php" performs an unprepared SQL query with an unsanitized parameter ($id). Only admin can access the page that invokes the function, but because of lack of CSRF protection, it is actually exploitable and could allow attackers to make a logged in admin delete arbitrary posts for example

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Orange-form Project

Products

Orange-form

CVE-2021-24669

MAZ Loader < 1.3.3 - Contributor+ SQL Injection

The MAZ Loader – Preloader Builder for WordPress plugin before 1.3.3 does not validate or escape the loader_id parameter of the mzldr shortcode, which allows users with a role as low as Contributor to perform SQL injection.

CVSS 3.1 · 8.8 High EPSS 1.3% KEV · Not listed

Vendors

Feataholic

Products

Maz Loader

CVE-2021-24666

Podlove Podcast Publisher < 3.5.6 - Unauthenticated SQL Injection

The Podlove Podcast Publisher WordPress plugin before 3.5.6 contains a 'Social & Donations' module (not activated by default), which adds the rest route '/services/contributor/(?P<id>[\d]+), takes an 'id' and 'category' parameters as arguments. Both parameters can be used for the SQLi.

CVSS 3.1 · 9.8 Critical EPSS 8.9% KEV · Not listed

Vendors

Podlove

Products

Podlove Podcast Publisher