CVE-2021-24400

HIGH · CVSS 7.2 EPSS 1.52%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-09-20 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2021-24400

Severity

HIGH

CVSS

7.2

EPSS

1.52%

WordPress

Original NVD Description

The Edit Role functionality in the Display Users WordPress plugin through 2.0.0 had an `id` parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.