AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2021-24864

HIGH · CVSS 8.8 EPSS 1.22%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-02-28 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 8.8. It affects WordPress. It involves a SQL injection risk.

CVE
CVE-2021-24864
Severity
HIGH
CVSS
8.8
EPSS
1.22%
WordPress

Original NVD Description

The WP Cloudy, weather plugin WordPress plugin before 4.4.9 does not escape the post_id parameter before using it in a SQL statement in the admin dashboard, leading to a SQL Injection issue