Not rated
CVE-2021-24754 The MainWP Child Reports WordPress plugin before 2.0.8 does not validate or sanitise the order parameter before using it…
Description
The MainWP Child Reports WordPress plugin before 2.0.8 does not validate or sanitise the order parameter before using it in a SQL statement in the admin dashboard, leading to an SQL injection issue
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MainWP Child Reports 2.0 | earliest → < 2.0.8 | 2.0.8 |