Advanced Custom Fields: Extended, CVE-2021-24865

CVE, Research URL: CVE-2021-24865
Home page URL: Security reports for Advanced Custom Fields: Extended
Application: Advanced Custom Fields: Extended
Published on: Jan 24, 2022
Research Description: The Advanced Custom Fields: Extended WordPress plugin before 0.8.8.7 does not validate the order and orderby parameters before using them in a SQL statement, leading to a SQL Injection issue
Affected versions: max 0.8.8.7.
Status: vulnerable