high7.2
CVE-2021-25064
The Wow Countdowns WordPress plugin through 3.1.2 does not sanitize user input into the 'did' parameter and uses it in a SQL statement, leading to an authentic…
Impact
The Wow Countdowns WordPress plugin through 3.1.2 does not sanitize user input into the 'did' parameter and uses it in a SQL statement, leading to an authenticated SQL Injection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wow-Company | Wow Countdowns | through 3.1.2 |