CVE-2021-24629 Post Content XMLRPC <= 1.0 - Admin+ SQL Injections

2021-11-0817:34:52

CWE-89

WPScan

www.cve.org

cve-2021-24629

post content xmlrpc

sql injection

wordpress plugin

admin dashboard

EPSS

0.001

Percentile

45.2%

JSON

The Post Content XMLRPC WordPress plugin through 1.0 does not sanitise or escape multiple GET/POST parameters before using them in SQL statements in the admin dashboard, leading to an authenticated SQL Injections

CNA Affected

[
  {
    "product": "Post Content XMLRPC",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThanOrEqual": "1.0",
        "status": "affected",
        "version": "1.0",
        "versionType": "custom"
      }
    ]
  }
]