CVE-2021-25114

critical · 9.8

A public exploit / detection template exists

Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →

The Paid Memberships Pro WordPress plugin before 2.6.7 does not escape the discount_code in one of its REST route (available to unauthenticated users) before using it in a SQL statement, leading to a SQL injection

9.8

CVSS

81.8%

EPSS (exploit prob.)

100th

EPSS percentile

2022-02-07

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-89

Affected products

Vendor	Product	Affected versions
strangerstudios	paid_memberships_pro	>= 2.4, < 2.4.5
strangerstudios	paid_memberships_pro	>= 2.5, < 2.5.11
strangerstudios	paid_memberships_pro	>= 2.6, < 2.6.7

Check a specific version with /api/v1/cve/match.

References

https://wpscan.com/vulnerability/6c25a5f0-a137-4ea5-9422-8ae393d7b76b
https://www.paidmembershipspro.com/pmpro-update-2-6-7-security-release/
https://wpscan.com/vulnerability/6c25a5f0-a137-4ea5-9422-8ae393d7b76b
https://www.paidmembershipspro.com/pmpro-update-2-6-7-security-release/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2021-25114