High severity8.8NVD Advisory· Published Mar 18, 2021· Updated Jun 17, 2026

CVE-2021-24143

Description

Unvalidated input in the AccessPress Social Icons plugin, versions before 1.8.1, did not sanitise its widget attribute, allowing accounts with post permission, such as author, to perform SQL injections.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

AccessPress Social Icons/AccessPress Social Iconsdescription
WordPress/Accesspress Social Iconsllm-fuzzy
Range: <1.8.1
Package: https://wordpress.org/plugins/accesspress-social-icons

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/02c5e10c-1ac7-447e-8ae5-b6d251be750bnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000