CVE-2021-20678

March 23, 2021

SQL injection vulnerability in the Paid Memberships Pro versions prior to 2.5.6 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.

Summary:

SQL injection vulnerability in the Paid Memberships Pro versions prior to 2.5.6 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.

Reference Links(if available):

  • https://www.paidmembershipspro.com/pmpro-update-2-5-6/
  • https://wordpress.org/plugins/paid-memberships-pro/
  • https://jvn.jp/en/jp/JVN08191557/index.html

  • CVSS Score (if available)

    v2: / MEDIUM

    v3: /

    Links to Exploits(if available)

  • You may have missed

    image

    [HUNTERS] – Ransomware Victim: A&O IT Group

    November 15, 2024
    image

    [RANSOMHUB] – Ransomware Victim: www[.]gob[.]mx

    November 15, 2024
    image

    [EVEREST] – Ransomware Victim: Bio-Clima Service Srl

    November 15, 2024
    image

    [FOG] – Ransomware Victim: Vector Transport (vectortransport[.]com)

    November 15, 2024
    image

    [EVEREST] – Ransomware Victim: A Sensitive Touch Home Health;Alphastar Home Health Care;Heart of Texas Home Healthcare Se

    November 15, 2024