CVE-2021-24754

Summary

The MainWP Child Reports WordPress plugin before 2.0.8 does not validate or sanitise the order parameter before using it in a SQL statement in the admin dashboard, leading to an SQL injection issue

Affected Software

VendorProductVersion RangeStatus
UnknownMainWP Child Reports2.0.8 < 2.0.8affected

Weaknesses

  • CWE-89: CWE-89 SQL Injection

ADP Enrichment

CVE Program Container

Additional References

References