Search vulnerabilities

Results 1

CVE-2021-25064

Wow Countdowns <= 3.1.2 - Admin+ SQLi

The Wow Countdowns WordPress plugin through 3.1.2 does not sanitize user input into the 'did' parameter and uses it in a SQL statement, leading to an authenticated SQL Injection.

CVSS 3.1 · 7.2 High EPSS 1.3% KEV · Not listed
Vendors
Products