Aller au contenu
Se connecter
Non notée

CVE-2021-24755 The myCred WordPress plugin before 2.3 does not validate or escape the fields parameter before using it in a SQL…

Description

The myCred WordPress plugin before 2.3 does not validate or escape the fields parameter before using it in a SQL statement, leading to an SQL injection exploitable by any authenticated user

Produits et versions touchés

Produit Versions touchées Corrigé en
myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin 2.3 premières → < 2.3 2.3

Autres CVE de myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin

Les 3 CVE de myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin →
CVE-2021-25015 The myCred WordPress plugin before 2.4 does not sanitise and escape the search query before outputting it back in the… Non notée CVE-2017-20008 The myCred WordPress plugin before 1.7.8 does not sanitise and escape the user parameter before outputting it back in… Non notée
Suivre cette CVE