Wp Board Project

wp-board_project

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

Wp Board

wp-board

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-24404 1Wp Board Project 1Wp Board Jun 17, 2026 Sep 20, 2021 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 The options.php file of the WP-Board WordPress plugin through 1.1 beta accepts a postid parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection. This is a time...Show more The options.php file of the WP-Board WordPress plugin through 1.1 beta accepts a postid parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection. This is a time based SQLI and in the same function vulnerable parameter is passed twice so if we pass time as 5 seconds it takes 10 seconds to return since the query ran twice.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2021-24404

1Wp Board Project

1Wp Board

Jun 17, 2026

Sep 20, 2021

N/A· v4

8.8 HIGH· v3

6.5 MEDIUM· v2

The options.php file of the WP-Board WordPress plugin through 1.1 beta accepts a postid parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection. This is a time based SQLI and in the same function vulnerable parameter is passed twice so if we pass time as 5 seconds it takes 10 seconds to return since the query ran twice.Show less