CVE-2021-25064
Wow Countdowns <= 3.1.2 - Admin+ SQLi
The Wow Countdowns WordPress plugin through 3.1.2 does not sanitize user input into the 'did' parameter and uses it in a SQL statement, leading to an authenticated SQL Injection.
CVSS 3.1 · 7.2 High
EPSS 1.3%
KEV · Not listed
Vendors
Products