CVE-2021-24864CWE-89

WP Cloudy < 4.4.9 - Admin+ SQL Injection

published February 28, 2022

CVSS
—
EPSS
1%
Percentile
68.5
In the wild
Unconfirmed
What it is

The WP Cloudy, weather plugin WordPress plugin before 4.4.9 does not escape the post_id parameter before using it in a SQL statement in the admin dashboard, leading to a SQL Injection issue

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01221 · 68.5th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2022-02-28T09:06Z
EPSS history
Timeline
  • 28 FEB 09:06Z
    WP Cloudy < 4.4.9 - Admin+ SQL Injection
    cvelistv5