CVE-2021-39351

Published: 2021-10-06T16:15Z

Last Modified: 2025-02-14T19:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The WP Bannerize WordPress plugin is vulnerable to authenticated SQL injection via the id parameter found in the ~/Classes/wpBannerizeAdmin.php file which allows attackers to exfiltrate sensitive information from vulnerable sites. This issue affects versions 2.0.0 - 4.0.2. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt