CVE-2021-24392

Name of the Vulnerable Software and Affected Versions WordPress Membership SwiftCloud.io WordPress plugin versions 1.0 and earlier

Description The issue arises from the improper sanitization, escaping, or validation of the id GET parameter in the WordPress Membership SwiftCloud.io WordPress plugin, leading to SQL injection.

Recommendations For WordPress Membership SwiftCloud.io WordPress plugin versions 1.0 and earlier, consider updating to a version where this issue is fixed, as using an unsanitized id GET parameter poses a significant risk. As a temporary workaround, restrict access to any API endpoints that utilize the id parameter to minimize the risk of exploitation.