CVE-2021-24866

Name of the Vulnerable Software and Affected Versions: WP Data Access WordPress plugin versions prior to 5.0.0

Description: The issue arises from the improper sanitization and escaping of the backup date parameter, which is used in a SQL statement. This leads to a SQL injection issue, potentially allowing for arbitrary table deletion.

Recommendations: For versions prior to 5.0.0, update to version 5.0.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the backup date parameter in the affected SQL statement until a patch is available.