CVE-2021-24401

Name of the Vulnerable Software and Affected Versions WP Domain Redirect WordPress plugin versions 1.0 and earlier

Description The issue concerns the Edit domain functionality in the WP Domain Redirect WordPress plugin, where the editid parameter is not properly sanitized, escaped, or validated before being inserted into a SQL statement. This oversight leads to SQL injection.

Recommendations For WP Domain Redirect WordPress plugin versions 1.0 and earlier, as a temporary workaround, consider restricting access to the Edit domain functionality until a patch is available. Avoid using the editid parameter in the affected functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.