Vulnerabilities (CVE)

Filtered by vendor Wp-display-users Project Subscribe
Filtered by product Wp-display-users
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-24400 1 Wp-display-users Project 1 Wp-display-users 2024-11-21 6.5 MEDIUM 7.2 HIGH
The Edit Role functionality in the Display Users WordPress plugin through 2.0.0 had an `id` parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.