Not rated
CVE-2021-24451 The Export Users With Meta WordPress plugin before 0.6.5 did not escape the list of roles to export before using them in…
Description
The Export Users With Meta WordPress plugin before 0.6.5 did not escape the list of roles to export before using them in a SQL statement in the export functionality, available to admins, leading to an authenticated SQL Injection.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Export Users With Meta 0.6 | earliest → < 0.6.5 | 0.6.5 |