PT-2021-15932
CVE-2021-24399
·
Published
2021-09-20
·
Updated
2021-09-28
Description by
CVSS 3.1
7.2
HighMetricsAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
The Sorter WordPress plugin versions 1.0 and earlier
Description
The issue concerns the
check order function, which uses an area id parameter that is not sanitized, escaped, or validated before being inserted into a SQL statement, leading to SQL injection.Recommendations
For The Sorter WordPress plugin versions 1.0 and earlier, consider disabling the
check order function until a patch is available to prevent potential SQL injection attacks.Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾