CVE-2021-24754CWE-89

MainWP Child Reports < 2.0.8 - Admin+ SQL Injection

published October 18, 2021

CVSS
—
EPSS
1%
Percentile
71.7
In the wild
Unconfirmed
What it is

The MainWP Child Reports WordPress plugin before 2.0.8 does not validate or sanitise the order parameter before using it in a SQL statement in the admin dashboard, leading to an SQL injection issue

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01371 · 71.7th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2021-10-18T13:46Z
EPSS history
Timeline
  • 18 OCT 13:46Z
    MainWP Child Reports < 2.0.8 - Admin+ SQL Injection
    cvelistv5