CVE-2021-24629

CVE-2021-24629: Post Content XMLRPC <= 1.0 - Admin+ SQL Injections

Vendor Unknown

Product Post Content XMLRPC

Weakness CWE-89 · SQLi

Published November 8, 2021

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Post Content XMLRPC WordPress plugin through 1.0 does not sanitise or escape multiple GET/POST parameters before using them in SQL statements in the admin dashboard, leading to an authenticated SQL Injections

Key dates

02Disclosure timeline

November 8, 2021 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-24629 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html

Related vulnerabilities

04Related CVE

CVE-2026-13532 itsourcecode Hospital Management System departmentDoctor.php sql injection CVE-2026-13542 itsourcecode Hospital Management System doctorprofile.php sql injection CVE-2026-57679 WordPress GeekyBot plugin <= 1.2.5 - SQL Injection vulnerability CVE-2026-12920 Cookie Banner for GDPR / CCPA <= 4.3.5 - Authenticated (Administrator+) SQL Injection via 's' Parameter CVE-2026-13454 MotoPress Appointment Booking <= 2.4.5 - Authenticated (Staff+) SQL Injection via 's' Parameter