CVE-2021-24137

HIGH · CVSS 8.8 EPSS 1.50%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-03-18 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2021-24137

Severity

HIGH

CVSS

8.8

EPSS

1.50%

WordPress

Original NVD Description

Unvalidated input in the Blog2Social WordPress plugin, versions before 6.3.1, lead to SQL Injection in the Re-Share Posts feature, allowing authenticated users to inject arbitrary SQL commands.