CVE-2021-25064

HIGH

Wow Countdowns WP <3.1.2 - Authenticated SQL Injection

Title source: llm
STIX 2.1

Description

The Wow Countdowns WordPress plugin through 3.1.2 does not sanitize user input into the 'did' parameter and uses it in a SQL statement, leading to an authenticated SQL Injection.

References (1)

Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://wpscan.com/vulnerability/30c70315-3c17-41f0-a12f-7e3f793e259c

Scores

CVSS v3 7.2
EPSS 0.0131
EPSS Percentile 67.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-89
Status published
Products (1)
wow-company/wow_countdowns < 3.1.2
Published Mar 28, 2022
Tracked Since Feb 18, 2026