CVE-2021-24132CWE-89

Slider by 10Web < 1.2.36 - Multiple Authenticated SQL Injection

published March 18, 2021

CVSS
—
EPSS
3%
Percentile
85.2
In the wild
Unconfirmed
What it is

The Slider by 10Web WordPress plugin, versions before 1.2.36, in the bulk_action, export_full and save_slider_db functionalities of the plugin were vulnerable, allowing a high privileged user (Admin), or medium one such as Contributor+ (if "Role Options" is turn on for other users) to perform a SQL Injection attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02586 · 85.2th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2021-03-18T14:57Z
EPSS history
Timeline
  • 18 MAR 14:57Z
    Slider by 10Web < 1.2.36 - Multiple Authenticated SQL Injection
    cvelistv5