← back
CVE-2021-24392CWE-89

WordPress Membership SwiftCloud.io <= 1.0 - Authenticated SQL Injection

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.5%
exploitation probability
1.5%top 27% of all CVEs
observed exploitation
nono source reports it
An id GET parameter of the WordPress Membership SwiftCloud.io WordPress plugin through 1.0 is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.