Wicked Folders, CVE-2021-24919

CVE, Research URL: CVE-2021-24919
Home page URL: Security reports for Wicked Folders
Application: Wicked Folders
Published on: Feb 01, 2022
Research Description: The Wicked Folders WordPress plugin before 2.8.10 does not sanitise and escape the folder_id parameter before using it in a SQL statement in the wicked_folders_save_sort_order AJAX action, available to any authenticated user. leading to an SQL injection
Affected versions: max 2.8.10.
Status: vulnerable